nextcloud / nextcloud/desktop

Fix NSAllowsArbitraryLoads (Mac App Store)

Open
#9,933 0 comments 0 reactions 1 assignee Claimed by @i2h3 View on GitHub
feature: :inbox_tray: install and update os: :apple: macOS
Dominant language
C++
Stars
3.9k
Forks
1k
Avg merge
1d 17h
Merged PRs (30d)
123

Description

Part of: #9941

## Problem

All four targets disable App Transport Security with `NSAllowsArbitraryLoads = true`. App Store Review requires ATS to be enabled; a blanket disable causes rejection.

## Affected files (source templates)

- `shell_integration/MacOSX/NextcloudIntegration/FinderSyncExt/Info.plist` (lines 31–35)
- `shell_integration/MacOSX/NextcloudIntegration/FileProviderExt/Info.plist` (lines 15–19)
- `shell_integration/MacOSX/NextcloudIntegration/FileProviderUIExt/Info.plist` (lines 15–19)
- Main app `Info.plist`

## Required change

Set `NSAllowsArbitraryLoads` to `false` in all four plists. Because Nextcloud servers can be self-hosted on plain HTTP, provide a written justification to Apple at submission time explaining that server addresses are user-supplied at runtime and cannot be enumerated at build time.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.