Comments (5)
We fully understand that this issue is due to the development phase of this project.
Please consider this issue as a reminder to ensure that this will not make it into production.
Please leave this issue open until it is resolved in the version we are testing.
Thank you very much
Proof of Concept:
The implementation of the isAllowed() function can be found in the DMDeveloperMenu.swift file:
private func isAllowed() -> Bool {
true
// #if RELEASE || DEBUG
// return true
// #else
// return false
// #endif
}
from cwa-app-ios.
We fully understand that this issue is due to the development phase of this project.
Please consider this issue as a reminder to ensure that this will not make it into production.
Please leave this issue open until it is resolved in the version we are testing.Thank you very much
Proof of Concept:
The implementation of the isAllowed() function can be found in the DMDeveloperMenu.swift file:private func isAllowed() -> Bool { true // #if RELEASE || DEBUG // return true // #else // return false // #endif }
Thanks for very much for bringing this issue up again. We will put this on our checklist that will be used during the release prep. This issue will remain open until we have completed the checklist.
from cwa-app-ios.
We require this menu to be available for a couple of more days since it will be useful during testing.
The app is using two different set of entitlements:
App Store Builds
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.developer.exposure-notification</key>
<true/>
</dict>
</plist>
Release and Debug Builds
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.developer.exposure-notification-test</key>
<true/>
<key>com.apple.developer.exposure-notification-test-skip-file-verification</key>
<true/>
<key>com.apple.developer.exposure-notification</key>
<true/>
</dict>
</plist>
Thus what the app can do is limited on an OS level already.
The developer menu is not able to do anything the user could not do otherwise. Getting access to the developer menu is harder than just sending the corresponding HTTP/s requests using a standard HTTP/s client. So even if we remove any traces of a developer menu from the code base you would still be able to do everything the developer menu can.
I am closing this issue. If you feel this is incorrect please simply reopen.
Thank you very much.
from cwa-app-ios.
hi, i have some experience in developing big banking app. we build for this 2 different versions of our app. one for appstore with disabled funktion (including logging) and one for testing with an apple enterprise account and different bundleid. maybe this could be an solution.
I can support you on on this if needed.
thanks
andreas
from cwa-app-ios.
@BSI-TF-CWA can you confirm that #484 fixes this?
from cwa-app-ios.
Related Issues (20)
- 3.0.0 RC-17 released as "Latest" and not "Pre-release" HOT 1
- 3.0.0 RC-18 released as "Latest" and not as "Pre-release" HOT 2
- 3.1.0-RC0 released as "Latest" and not as "Pre-Release" HOT 1
- Missing 3.0.0 release HOT 2
- v3.1.0-rc.1 released as "Latest" and not "Pre-release" HOT 1
- What are you using to ensure app integrity under iOS? HOT 2
- Missing i18n key HOT 10
- Help wanted: Attempting to run tests only throws error HOT 4
- When does the SRS error `API_TOKEN_ALREADY_USED` come up? HOT 5
- Missing 3.1.0 GitHub release HOT 7
- v3.2.0-RC4 released as "Latest" and not "Pre-release" HOT 1
- The CWA development ends on May 31, 2023. You still can warn other users until April 30, 2023.
- Status tab app closure notice arrow is not aligned correctly HOT 4
- Missing 3.2.0 GitHub release HOT 3
- App crashes instantly HOT 10
- "Nightly Checks and Tasks" workflow always fails HOT 2
- Quick actions are not reduced correctly in hibernation state HOT 4
- Missing 3.2.1 GitHub release HOT 4
- App doesn't correctly deactivate the ENF in some circumstances HOT 4
- Missing 3.2.3 GitHub release HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cwa-app-ios.