breautek commented on issue #1054:
URL: https://github.com/apache/cordova-docs/issues/1054#issuecomment-1264697786
> Thank you for the detailed answer! The case I was interested in personally
is the scenario where there is no remote JS at all, only remote static HTML.
Basically, if you have an app that does not expose cordova.js and does not run
JS from any external source, but simply fetches static HTML via AJAX to be used
as a template (from a server you control), with no JS code at all in said
template, then I think it's reasonable to believe that that is not "remote
code", right? Just for the sake of speculation, I understand we are not lawyers
and this isn't legal advice.
Yes, as long as nothing loads up `cordova.js`, then you should be fine as
far as Section 4.7 is concerned. You could even ensure that `cordova.js` is not
even packaged by removing the file from the assets, so that if something
**did** end up executing JS, potentially maliciously, it can't even attempt to
load the code by creating a script tag like:
```
var x = document.createElement('script');
x.src = 'path/to/cordova.js';
document.body.appendChild(x);
```
However, honestly if you're loading up a website as an app, you may have
other issues unrelated to Section 4.7. Apple is very picky in how apps are
designed, and apps that simply feels like websites can be rejected, which is
detailed under [Section
4.2](https://developer.apple.com/app-store/review/guidelines/#minimum-functionality),
which the opening paragraph reads:
> Your app should include features, content, and UI that elevate it beyond a
repackaged website. If your app is not particularly useful, unique, or
“app-like,” it doesn’t belong on the App Store. If your App doesn’t provide
some sort of lasting entertainment value or adequate utility, it may not be
accepted. Apps that are simply a song or movie should be submitted to the
iTunes Store. Apps that are simply a book or game guide should be submitted to
the Apple Books Store.
So if you're just packaging up a static website, or even just using Cordova
to connect to this static website remotely, that contains little to no
functionality, then Apple may deem that the app is not of App quality (and
instead should just be served as an actual website where users can use the
Safari browser to access).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For additional commands, e-mail: issues-h...@cordova.apache.org
