经过大半个月的交涉,苹果终于电话告知我一直被拒的原因,下面是原文:
Thanks for your time on the phone today.
As we discussed, we continue to find that your app contains feature change capable frameworks.
Specifically, we found "remoteManifestUrl” ,”remoteVersionUrl”, “hotUpdateSearchPaths);” “JSON.parse(hotUpdateSearchPaths);” and etc in your app’s coding.
This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes. This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior and/or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.
To resolve this issue, it would be appropriate to remove all hidden features including hidden frameworks and codes in your app.
We hope you will consider making the necessary changes to be in compliance with the App Store Review Guidelines and will resubmit your revised app.
Please reply to this message via Resolution Center on App Store Connect or feel free to contact me at +1-669-283-4658 during weekdays, between 9AM - 5PM Pacific Time, if you need further clarification.
Best regards,
Jenny
App Store Review
----------------------完美的分割线-----------------------------------------------------------------
原因是检测出代码里面包含了这些关键字,可能creator代码的一些部分已经被标记,完全是看运气,如果不幸和我一样被关进小黑屋,那么就会进行严审,包括但不限于检测代码、资源等。所以第一次提审的时候,建议小伙伴们先去除一切热更相关代码,先过审再说,并不是其他小伙伴提出主要隐藏热更新界面。