4 ms·
Apple explicitly does not allow this in their app stores.[0] > 2.4.5(iv): [Apps] may not download or install standalone apps, kexts, additional code, or resour
by csnover 6y ago
Apple explicitly does not allow this in their app stores.[0]
> 2.4.5(iv): [Apps] may not download or install standalone apps, kexts, additional code, or resources to add functionality or significantly change the app from what we see during the review process.
> 2.5.2: Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
[0] https://developer.apple.com/app-store/review/guidelines/ https://developer.apple.com/app-store/review/guidelines/
- fiddlerwoaroof 6y agoThe app can’t download code, but I’m fairly sure that it can allow users to write code that modifies functionality (various on-device programming environments already exist) and it can allow a user to use iTunes to copy code to the device. I’m also curious how something like Expo/React Native fits into all this? I guess JavaScript is an exception to this rule?
- iainmerrick 6y agoI don’t think it’s explicitly called out as an exception, it’s just a grey area that Apple hasn’t chosen to crack down on as yet. Microsoft’s CodePush in particular seems like something Apple might decide to block at some point.
- lubujackson 6y agoIf the levels/code are passed in plaintext and simply parsed by the app, it is hard to argue it is different or less secure than sending photos in Instagram or playing a game of chess. What is passed may be parsed by the app but it is contained and limited by the boundaries of the app. The app store is much more concerned with stuff like apps that update themselves to install payloads or change the approved app on a fundamental level.