Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NSSecureCoding NSObject bypasses security #1188

Closed
maratal opened this issue Oct 17, 2021 · 0 comments · Fixed by #1194
Closed

NSSecureCoding NSObject bypasses security #1188

maratal opened this issue Oct 17, 2021 · 0 comments · Fixed by #1194
Assignees

Comments

@maratal
Copy link
Collaborator

maratal commented Oct 17, 2021

Xcode 13 gives a runtime issue for art_unarchive method in NSObject (ARTArchive) category:

"NSSecureCoding allowed classes list contains [NSObject class], which bypasses security by allowing any Objective-C class to be implicitly decoded. Consider reducing the scope of allowed classes during decoding by listing only the classes you expect to decode, or a more specific base class than NSObject. This will become an error in the future."

┆Issue is synchronized with this Jira Uncategorised by Unito

@maratal maratal self-assigned this Oct 18, 2021
@maratal maratal linked a pull request Oct 22, 2021 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging a pull request may close this issue.

1 participant