{"id":3740,"date":"2016-02-09T18:37:42","date_gmt":"2016-02-09T16:37:42","guid":{"rendered":"https:\/\/www.tomislavstankovic.com\/blog\/?p=3740"},"modified":"2019-01-05T19:59:47","modified_gmt":"2019-01-05T17:59:47","slug":"napraviti-apache-cordova-platform-update","status":"publish","type":"post","link":"https:\/\/www.tomislavstankovic.com\/blog\/napraviti-apache-cordova-platform-update\/","title":{"rendered":"Kako napraviti Apache Cordova Platform update"},"content":{"rendered":"

Kada dovoljno dugo\u00a0razvijate mobilne aplikacije koriste\u0107i Apache Cordova<\/a> odnosno Ionic Framework<\/a> pitanje je vremena kada \u0107e vam se Google javiti sa zanimljivim e-mailom uz dramati\u010dan naslov “You are using a vulnerable version of Apache Cordova<\/strong>” s obavijesti o uklanjaju\u00a0va\u0161e aplikacije sa Play Storea ako ne izvr\u0161ite potreban sigurnosni update<\/em><\/a>.<\/p>\n

Hello Google Play Developer,<\/p>\n

Your app(s) listed at the end of this email utilize a version of Apache Cordova, an open-source mobile development framework, that contains one or more security vulnerabilities. If you have more than 20 affected apps in your account, please check the Developer Console for a full list.<\/p>\n

Please migrate your app(s) to Apache Cordova v.4.1.1 or higher as soon as possible and increment the version number of the upgraded APK. <\/strong>Beginning May 9, 2016<\/span><\/span>, Google Play will block publishing of any new apps or updates that use pre-4.1.1 versions of Apache Cordova.<\/p>\n

The vulnerabilities were addressed in Apache Cordova 4.1.1. If you\u2019re using a 3rd party library that bundles Apache Cordova, you\u2019ll need to upgrade it to a version that bundles Apache Cordova 4.1.1 or later.<\/p>\n

To confirm you\u2019ve upgraded correctly, submit the updated version to the Developer Console and check back after five hours. If the app hasn\u2019t been correctly upgraded, we will display a warning.<\/p>\n

For information about the vulnerabilities, please see this Google Help Center article<\/a>. For other technical questions, you can post to Stack Overflow<\/a> and use the tag \u201candroid-security.\u201d<\/p>\n

While these specific issues may not affect every app that uses Apache Cordova, it\u2019s best to stay up to date on all security patches. Apps with vulnerabilities that expose users to risk of compromise may be considered Dangerous Products<\/a> in violation of the Content Policy and section 4.4<\/a> of the Developer Distribution Agreement.<\/p>\n

Apps must also comply with the Developer Distribution Agreement<\/a> and Content Policy<\/a>. If you feel we have sent this warning in error, contact our policy support team through the Google Play Developer Help Center<\/a>.<\/p>\n

Regards,<\/p>\n

The Google Play Team<\/p><\/blockquote>\n

Ipak, nema mjesta panici. Nadogradnju\u00a0mo\u017eete napraviti pokretanjem naredbe<\/p>\n

$ npm update \u2013g cordova<\/pre>\n
I to je skoro to. Sada mo\u017eete nadograditi\u00a0i platforme za koje ste radili mobilnu aplikaciju. U ovom slu\u010daju aplikacija je ra\u0111ena za iOS i Android platformu pa se\u00a0nakon pokretanja naredbe<\/p>\n
$ cordova platform check<\/pre>\n
mo\u017ee vidjeti da postoji nadogradnja\u00a0za obje platforme:<\/p>\n