jpush / jpush/jpush-react-native

vivo的sdk隐私合规通不过, 说是先读了AndroidID

Open
#979 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Java
Stars
1.4k
Forks
348
PR merge metrics
No merged PRs in 30d

Description

同意后才调用插件的初始化JPush.init, 最新的隐私检测发现还是先读了AndroidID
11:34:47.797 [测试动作] 启动隐私合规检测
11:35:35.666 (SDK: 极光推送SDK)读取AndroidID
11:37:42.276 弹出隐私政策
android_id
at android.provider.Settings$Secure.getStringForUser()
at android.provider.Settings$Secure.getString(Settings.java:4664)
at cn.jiguang.commons.L.j.a(Unknown Source:10)
at cn.jiguang.commons.g.o.a(Unknown Source:164)
at cn.jiguang.commons.g.o.c(Unknown Source:33)
at cn.jiguang.commons.g.m.d(Unknown Source:62)
at cn.jiguang.commons.g.n.a(Unknown Source:39)
at cn.jiguang.commons.v.c.k(Unknown Source:144)
at cn.jiguang.commons.v.c.a(Unknown Source:159)
at cn.jiguang.commons.j.m.e(Unknown Source:7)
at cn.jiguang.f.b$b.a(Unknown Source:30)
at cn.jiguang.f.b.a(Unknown Source:15)
at cn.jiguang.f.b$a.g(Unknown Source:14)
at cn.jiguang.f.b$a.d(Unknown Source:9)
at cn.jiguang.ai.a.c(Unknown Source:147)
at cn.jiguang.ai.a.(Unknown Source:11)
at cn.jiguang.ai.a.a(Unknown Source:13)
at cn.jiguang.ab.h.a(Unknown Source:7)
at cn.jiguang.ab.h.a(Unknown Source:35)
at cn.jiguang.au.b.run(Unknown Source:9)
at cn.jiguang.au.d$1.run(Unknown Source:19)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1162)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:636)
at java.lang.Thread.run(Thread.java:764)

测了好久发现是vivo的sdk有问题,注释掉就能通过测试了。
implementation 'cn.jiguang.sdk.plugin:huawei:6.0.1'
implementation 'cn.jiguang.sdk.plugin:xiaomi:6.0.1'
implementation 'cn.jiguang.sdk.plugin:meizu:6.0.1'
implementation 'cn.jiguang.sdk.plugin:oppo:6.0.1'
//implementation 'cn.jiguang.sdk.plugin:vivo:6.0.1'
implementation 'cn.jiguang.sdk.plugin:honor:6.0.1'

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the privacy check with the Vivo dependency cn.jiguang.sdk.plugin:vivo:6.0.1 enabled, comparing it with the configuration where that dependency is commented out. Trace when JPush.init runs relative to the AndroidID access shown in the stack trace; done means the Vivo plugin no longer reads AndroidID before the privacy policy is accepted.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java, react-native
Domain
mobile
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.