I have been trying to publish my application that i developed using cordova tools for VS 2013, and i keep on getting my application was rejected for violating dangerous products policy.
I searched around trying to get a solution but with no luck. I ran this
command(cordova -v)
to check which version of cordova i am using and i found out that it is 4.2.0, i put this line
(**<preference name="phonegap-version" value="4.2.0" />**)
inside my config.xml but no luck.
Can someone please explain to me what i might not be doing right.
Are you building using PhoneGap? If so, be sure to use Cordova version 4.3.1 or higher. There's a known Android security flaw that was heavily reported when it was found. The latest VS 2013 Tools for Apache Cordova update should already be using a version higher than this version as is VS 2015.
See this article for remediation steps.
Related
Preamble
My org is low-risk so we're planning to stick to LTS releases (.NET Core 3.1 at the time of this post.) The Nuget Package Manager Updates list, however, currently offers non-LTS updates (namely to .NET 5.0.)
Question
Is there a way to configure Visual Studio in a way to show LTS updates only? Alternatively, is there any other way I can achieve the same desired result?
(This question is actually almost a copy of Lion's original, but I'm hoping that improvements on api.nuget.org or in the way Visual Studio handles API results may result in a viable answer.)
Your question is a real good question. And many community members want this feature on PackageReference for net core projects.
In fact, what you want is not supported on PackageReference so far. And net framework projects with packages.config nuget management format can realize it. See this official document.
Under packages.config, you can use allowedVersions node for nuget packages on packages.config file, such as [3.1.0, 5.0.0). It means 3.1.0 <= current version < 5.0.0. You can only update the nuget package under that range on the Nuget Package Manager UI.
It is quite useful feature but Microsoft has not added this feature for the new-sdk project with PackageReferece. Therefore, many community members has raised this issue on github which is still in processing.
And the Team has planned to fix the problem on December 20. So I suggest you could follow that github link and add any comments to describe your issue to raise more attention from Microsoft' team. All of them will help solve the problem as soon as possible.
I developed an app that'll stream a rtmp video. Before I used VitamioBundle-master. I upload my app in play store it shows some warning message for upgrading my app that has to use vitamio latest version. I download it from the link shown in that alert message. Now I develop the app using vitamio 5.0.2 downloaded from the link https://www.vitamio.org/en/Download/. Once I upload the app play store shows the same alert message
Security alert
Your app utilizes a version of Vitamio, a multimedia library used for playing various types of media files, containing a security vulnerability.
Please upgrade your app(s) as soon as possible and increment the version number of the upgraded APK. Beginning 14 March 2016, Google Play will block publishing of any new apps or updates that use pre-5.0 versions of Vitamio.
The vulnerability was addressed in Vitamio v5.0. The latest versions of Vitamio can be downloaded on the Vitamio website. You can confirm your Vitamio version by checking if the SDK includes libs/armeabi-v7a/libvinit.so or libs/armeabi/libvinit.so. If either file is present, the SDK needs to be upgraded. For help upgrading, see the Vitamio support documentation. If you’re using a 3rd party library that bundles Vitamio, please notify the 3rd party and work with them to address this.
To confirm you’ve upgraded correctly, submit the updated version to the Developer Console and check back after five hours. If the app hasn’t been correctly upgraded, we will display a warning.
The vulnerability is due to the Vitamio SDK containing world-writable code. For more information about the vulnerability, please see this NowSecure blog post. For other technical questions, you can post to Stack Overflow and use the tags “android-security” and “vitamio.”
While these specific issues may not affect every app that uses Vitamio, it’s best to stay up to date on all security patches. Apps with vulnerabilities that expose users to risk of compromise may be considered in violation of our Malicious Behavior policy and section 4.4 of the Developer Distribution Agreement.
Apps must also comply with the Developer Distribution Agreement and Developer Program Policies. If you feel we have sent this warning in error, contact our policy support team through the Google Play Developer Help Center.
I gone through several solutions mentioned in different tutorial but not yet get a clear idea. Can anyone tell me the step by step procedure for updating my vitamio sdk version, or else is there any other lib for streaming rtmp video in my Android app?
Unfortunately, Vitamio 5.0.2 added back the old libvinit.so file, so it gets flagged as an old version of Vitamio. You can just delete libvinit.so and it should work.
I am targeting the free edition (http://imageresizing.net/plugins/editions/free). I dont see any issues for using this in a commercial production environment but is it ok to use for paid apps?
Theres a lot of advice on using the disk cache plugin, although the site would be heavily used is this plugin really necessary as the most the plugin would be doing is to show thumbnails, resize images where necessary and upload images to in order to resize them appropriately.
It will be used in an ASP .Net project (not MVC). Could i continue to install by using the commands (correct me if im wrong but i dont think this installs ImageResizer to carry out what i need it to?)
PM> Install-Package ImageResizer.MvcWebConfig
PM> Install-Package ImageResizer.Plugins.DiskCache
PM> Install-Package ImageResizer.Plugins.PrettyGifs
Or is there an alternative Package Manager install option for an ASP .Net site? At present Im downloading the entire package but ideally i hate to install everything only to get one component if thats all that i require.
There are no problems whatsoever using the Essential Edition plugins in a paid or commercial app. In V4, we will be dual-licensing Essential Edition under the Apache license to make this clearer.
Yes, permanent caching of some kind is an absolute must, or you won't scale past a few concurrent visitors. You have many options; DiskCache (paid), TinyCache (free, essential), or any kind of CDN or reverse proxy (higher latency, more cache misses than DiskCache).
The ImageResizer.Mvc package is required for any type of ASP.NET project using .NET 4.0 or higher.
We successfully setup the Meteor 0.7.1.2 in Centos. Is it Latest version supporting installation in windows 8 officially?. If yes please share the information.
we know its supporting unofficially with the following url
http://win.meteor.com
Thanks
Ramu
I agree about the cloud solutions. I've used the unofficial Windows version and had some problems, but I am loving cloud development with Meteor.
If you are interested in trying it out, I wrote up an entire tutorial on how to get set up with cloud development in Meteor and included a screencast.
http://simpleprogrammer.com/2014/10/13/getting-started-meteor-tutorial-cloud/
Windows support is not yet official and win.meteor.com outlines some workarounds, the better ones which include utilizing a virtual machine. There is a suggested native solution (launchmeteor.exe), although unofficial, with key difference (for some developers) being Meteorite not work on Windows yet.
According to the roadmap trello board https://trello.com/c/ZMvnfMfI/11-official-windows-support official windows support is targeted for 1.0 if time permits, but it seems very unlikely.
For interim portability, you may want to have a look at cloud solutions like nitrous.io at http://help.nitrous.io/meteor-app/ which runs the dev environment on the cloud but has a windows desktop app http://blog.nitrous.io/2014/02/25/nitrous-desktop-is-now-available-for-windows.html which at least lets you develop locally and sync to your nitrous.io cloud box.
I have been using flex builder plug-in. But now trial period has expired and looking for some other option which comes free. I am trying to install flash develop plugin for eclipse. In my attempt to install I am trying this page but donno what all plugins to install...http://www.flashdevelop.org/wikidocs/index.php?title=3rd_Party_Plugins ...Can some one please guide. The problem i am facing here is I am not sure about what is outdated and what is useful
FlashDevelop is a standalone application (windows only), as far I know there is no plugin for eclipse. If you are searching for an eclipse plugin, there's the commercial FDT, with a 30 day trial period.
A new FlashDevelop version (4.0) is about to be released and most plugins from the old version aren't compatible with the new one. So I unless there's a new list somewhere or some plugin explicitly states that it supports the new version, every plugin there is probably outdated. Anyway, many plugins from that list have been integrated in FlashDevelop. You can of course use the latests stable 3.x version if you need a particular plugin.
If you've never used FlashDevelop, you should just try the stable 3.3.4 or the latest 4.0 beta or the very latest developement build and see if you are missing some features.
You could always write your code in Notepad and use the command line compiler provided in the free SDK. It's not going to be as nice as any IDE, but it is functional.
Another option, if you are a student or unemployed, is to request a complimentary license to Flash Builder from Adobe.
Another option is to use Tofino, a Free Visual Studio Plugin for Flex Development. However, you'll need Visual Studio for that to work. [And I assume a Windows Machine].
FlashDevelop, as others have noted, is not an Eclipse Plugin as far as I knew. It is a stand alone tool.
Other IDEs for building Flex applications are:
Sapphire Steel Amethyst, which is a commercial Visual Studio
Plugin
FDT; which is an eclipse based plugin. I believe FDT5
will have a free / community option, but I do not know if it is
available yet.
IntelliJ, which many developers swear by.
And of course Flash Builder. I believe the previous three are all commercial plugins, so do not fill your "free" Criteria.