Android 使用 MobileFirst 7.1 构建的应用程序被 Google Play 商店拒绝

Android Application Build with MobileFirst 7.1 is Rejected by Google Play Store

我有一个使用 Mobile First 7.1 开发的应用程序。我添加了 Android 环境并构建了项目。我从生成的 Android 项目创建了已签名的 APK 并上传了 Google Play 商店,我的申请已被 Google Play 商店拒绝并显示以下消息

Hello Google Play Developer,
We rejected SampleApp, with package name com.Sample.app, for violating our Malicious Behavior or User Data policy. If you submitted an update, the previous version of your app is still available on Google Play. This app uses software that contains security vulnerabilities for users or allows the collection of user data without proper disclosure. Below is the list of issues and the corresponding APK versions that were detected in your recent submission. Please upgrade your app(s) as soon as possible and increment the version number of the upgraded APK. Vulnerability APK Version(s) Apache Cordova The vulnerabilities were fixed in Apache Cordova v.4.1.1 or higher. You can find information about how to upgrade in this Google Help Center article. 44 To confirm you’ve upgraded correctly, submit the updated version of your app to the Developer Console and check back after five hours to make sure the warning is gone. While these vulnerabilities may not affect every app that uses this software, it’s best to stay up to date on all security patches. Make sure to update any libraries in your app that have known security issues, even if you're not sure the issues are relevant to your app. Apps must also comply with the Developer Distribution Agreement and Developer Program Policies. If you feel we have made this determination in error, please reach out to our developer support team.

您使用的 MobileFIrst 7.1 的构建级别是多少? 最新版本的 MobileFirst 7.1 应该已修复此问题。

您无法升级 MobileFirst Platform Foundation 7.1 附带的 Cordova。但是,Google 关注的漏洞已在应用这些修复程序后发布的 7.1 构建附带的 Cordova 版本中得到解决,并且 Google 了解如何识别具有适当的 MFP 应用程序已应用修复程序。因此,如果您为 MFP 7.1 应用最新的 iFix 并使用它重建您的应用程序,则不应因此而被拒绝。

如果您是 IBM 客户,可以获得最新的 iFix for 7.1 here。如果您以这种方式构建应用程序,则此问题的修复在 Studio 组件或 CLI 中。如果您使用的是 Studio,则可以通过将下载的 Studio ZIP 文件(它是 Eclipse p2 安装存储库)添加为 Eclipse 中的软件安装源并进行更新来应用修复。