4 ms·
Isn't arbitrary code execution forbidden on the app store?
by napolux 13y ago
Isn't arbitrary code execution forbidden on the app store?
- glhaynes 13y agoArbitrary downloaded code.
- napolux 13y agoOk, thanks!
- dangoor 13y agoI wonder if the feature to install workflows from pages like this would run afoul of the terms: http://editorial-app.appspot.com/workflow/6231550869897216/6XxWPX2YgGI http://editorial-app.appspot.com/workflow/6231550869897216/6... I seem to remember Codea having some sort of sharing feature (via email?) that they had to remove for that reason. That's kind of a drag, but this looks like a cool app even without 1-click install of workflows.
- interpol_p 13y agoWe were forced to remove email sharing of projects in Codea in 2011. It seems like more and more apps are being allowed to include downloadable scripts. I wonder if there is some unwritten change of policy for coding apps. Interesting to see that Editorial includes this (and it looks like an amazing app).
- robterrell 13y agoYou can execute anything the user types in. You just can't download code to run, unless you run it through WebKit.
- dvanduzer 13y agoCould you lazyweb me in the direction of the "unless you run it through WebKit" clause?
- schrodinger 13y agoThe point is that you can load a webpage in an embedded webkit view, which constitutes running arbitrary downloaded code.
- ripter 13y agoThe idea is that you can't implement your own store (free or paid) but you can load webpages.
- pudquick 13y agoInterpreters are allowed, native code execution (including JIT) is not. Additionally, if you submit an application with an interpreter to the App Store, you will get declined if you make it easy for your users to download arbitrary scripts / code and execute it in your interpreter. http://developer.apple.com/appstore/guidelines.html http://developer.apple.com/appstore/guidelines.html "3.3.2 An Application may not download or install executable code. Interpreted code may only be used in an Application if all scripts, code and interpreters are packaged in the Application and not downloaded. The only exception to the foregoing is scripts and code downloaded and run by Apple’s built-in WebKit framework." Exporting, however is ok. Additionally, it's not expressed explicitly but user-created scripts are also allowed.