You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "erisu (via GitHub)" <gi...@apache.org> on 2024/04/09 05:57:59 UTC

[PR] feat(ios): add bundled resources for privacy manifest [cordova-plugin-device]

erisu opened a new pull request, #193:
URL: https://github.com/apache/cordova-plugin-device/pull/193

   <!--
   Please make sure the checklist boxes are all checked before submitting the PR. The checklist is intended as a quick reference, for complete details please see our Contributor Guidelines:
   
   http://cordova.apache.org/contribute/contribute_guidelines.html
   
   Thanks!
   -->
   
   ### Platforms affected
   
   ios
   
   ### Motivation and Context
   <!-- Why is this change required? What problem does it solve? -->
   <!-- If it fixes an open issue, please link to the issue here. -->
   
   Support Apple's Privacy Manifest requirements
   
   ### Description
   <!-- Describe your changes in detail -->
   
   - Created a resource bundle
   - Added `PrivacyInfo.xcprivacy` to the resource bundle
   - Load bundle into iOS project with `resource-file` in `plugin.xml`
   
   The bundle is prefixed with Cordova's internal `CDV` namespace. 
   
   Note for third-party plugins: When creating a bundle or even class names, it is recommended to establish your own namespace and utilize a unique identifier to prevent conflicts with other plugins.
   
   ### Testing
   <!-- Please describe in detail how you tested your changes. -->
   
   - platform add
   - plugin add
   - archive project
   - generated privacy report
   
   ### Checklist
   
   - [ ] I've run the tests to see all new and existing tests pass
   - [ ] I added automated test coverage as appropriate for this change
   - [ ] Commit is prefixed with `(platform)` if this change only applies to one platform (e.g. `(android)`)
   - [ ] If this Pull Request resolves an issue, I linked to the issue in the text above (and used the correct [keyword to close issues using keywords](https://help.github.com/articles/closing-issues-using-keywords/))
   - [ ] I've updated the documentation if necessary
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Re: [PR] feat(ios): add bundled resources for privacy manifest [cordova-plugin-device]

Posted by "breautek (via GitHub)" <gi...@apache.org>.
breautek commented on code in PR #193:
URL: https://github.com/apache/cordova-plugin-device/pull/193#discussion_r1557585100


##########
README.md:
##########
@@ -305,3 +305,47 @@ var boolean = device.isiOSAppOnMac;
 ### Supported Platforms
 
 - iOS
+
+---
+
+## iOS Privacy Manifest
+
+As of May 1, 2024, Apple requires a privacy manifest file to be created for apps and third-party SDKs. The purpose of the privacy manifest file is to explain the data being collected and the reasons for the required APIs it uses. Starting with `cordova-ios@7.1.0`, APIs are available for configuring the privacy manifest file from `config.xml`.
+
+This plugin comes pre-bundled with a `PrivacyInfo.xcprivacy` file that contains the list of APIs it uses and the reasons for using them.
+
+However, as an app developer, it will be your responsibility to identify additional information explaining what your app does with that data.
+
+In this case, you will need to review the "[Describing data use in privacy manifests](https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_data_use_in_privacy_manifests)" to understand the list of known `NSPrivacyCollectedDataTypes` and `NSPrivacyCollectedDataTypePurposes`.
+
+For example, with this plugin, you may collect the device ID for app functionality or analytics. In the case of app functionality, you would write the following in `config.xml`:

Review Comment:
   > For example, with this plugin, you may collect the device ID for app functionality or analytics.
   
   I don't really like this statement because the example suggests functionality or analytics, but shows in the example plist only functionality.
   
   I think we should either make it simple and drop `or analytics`, or change the terminology to `functionality and analytics` and include the analytics key in the plist array.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Re: [PR] feat(ios): add bundled resources for privacy manifest [cordova-plugin-device]

Posted by "breautek (via GitHub)" <gi...@apache.org>.
breautek commented on code in PR #193:
URL: https://github.com/apache/cordova-plugin-device/pull/193#discussion_r1557585100


##########
README.md:
##########
@@ -305,3 +305,47 @@ var boolean = device.isiOSAppOnMac;
 ### Supported Platforms
 
 - iOS
+
+---
+
+## iOS Privacy Manifest
+
+As of May 1, 2024, Apple requires a privacy manifest file to be created for apps and third-party SDKs. The purpose of the privacy manifest file is to explain the data being collected and the reasons for the required APIs it uses. Starting with `cordova-ios@7.1.0`, APIs are available for configuring the privacy manifest file from `config.xml`.
+
+This plugin comes pre-bundled with a `PrivacyInfo.xcprivacy` file that contains the list of APIs it uses and the reasons for using them.
+
+However, as an app developer, it will be your responsibility to identify additional information explaining what your app does with that data.
+
+In this case, you will need to review the "[Describing data use in privacy manifests](https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_data_use_in_privacy_manifests)" to understand the list of known `NSPrivacyCollectedDataTypes` and `NSPrivacyCollectedDataTypePurposes`.
+
+For example, with this plugin, you may collect the device ID for app functionality or analytics. In the case of app functionality, you would write the following in `config.xml`:

Review Comment:
   > For example, with this plugin, you may collect the device ID for app functionality or analytics.
   
   I don't really like this statement because the example suggests functionality or analytics, but shows in the example plist only functionality, suggesting that functionality key is acceptable for both functionality and analytics.
   
   I think we should either make it simple and drop `or analytics`, or change the terminology to `functionality and analytics` and include the analytics key in the plist array.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Re: [PR] feat(ios): add bundled resources for privacy manifest [cordova-plugin-device]

Posted by "erisu (via GitHub)" <gi...@apache.org>.
erisu merged PR #193:
URL: https://github.com/apache/cordova-plugin-device/pull/193


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Re: [PR] feat(ios): add bundled resources for privacy manifest [cordova-plugin-device]

Posted by "erisu (via GitHub)" <gi...@apache.org>.
erisu commented on code in PR #193:
URL: https://github.com/apache/cordova-plugin-device/pull/193#discussion_r1557681579


##########
README.md:
##########
@@ -305,3 +305,47 @@ var boolean = device.isiOSAppOnMac;
 ### Supported Platforms
 
 - iOS
+
+---
+
+## iOS Privacy Manifest
+
+As of May 1, 2024, Apple requires a privacy manifest file to be created for apps and third-party SDKs. The purpose of the privacy manifest file is to explain the data being collected and the reasons for the required APIs it uses. Starting with `cordova-ios@7.1.0`, APIs are available for configuring the privacy manifest file from `config.xml`.
+
+This plugin comes pre-bundled with a `PrivacyInfo.xcprivacy` file that contains the list of APIs it uses and the reasons for using them.
+
+However, as an app developer, it will be your responsibility to identify additional information explaining what your app does with that data.
+
+In this case, you will need to review the "[Describing data use in privacy manifests](https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_data_use_in_privacy_manifests)" to understand the list of known `NSPrivacyCollectedDataTypes` and `NSPrivacyCollectedDataTypePurposes`.
+
+For example, with this plugin, you may collect the device ID for app functionality or analytics. In the case of app functionality, you would write the following in `config.xml`:

Review Comment:
   I have updated this sentence and example config.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org