iOS veracode出现Improper administration of the permissions to the users of提示时的解决方案

 

iOS安全扫描的时候有个问题一直不通过
CWE 284 Improper Access Control

Flaw Category: Other

Effort to Fix: 0 - Effort to fix is unknown.

Description: Improper administration of the permissions to the users of a system can result in unintended access to sensitive files.

Remediation: Remediation guidance is unavailable.

 

 

 

 

Attack Vector

 

Attack Vector 

WKAppBoundD omains 

 

Procedure 

WKAppBound Domains 

 

location:

/Payload/xxx.app/Info.plist 0 

 

 

解决方案：

在项目的info.plist里加上以下权限即可
  <key>WKAppBoundDomains</key>

    <array>

        <string>XXX.com</string>

    </array>

 

 

Location