mlkit
mlkit copied to clipboard
[Bug report] Foreign Domain Found in ML Kit TextRecognition SDK
ENVIRONMENT
- OS version: 15.4 (24E248)
- ML Kit APIs and versions: 8.0.0
STEPS
- Install the latest ML Kit Text Recognition pod (GoogleMLKit/TextRecognition)
- Search for suspicious domains in the built frameworks using: grep -r "nic.ir.md"
- Observe that the domain nic.ir.md is present in the compiled binary for MLKitTextRecognitionCommon
EXPECTED
No hardcoded references to unrelated or suspicious domains such as nic.ir.md should exist in production ML Kit SDK binaries, especially when unrelated to the SDK’s functionality.
ACTUAL
A suspicious domain (nic.ir.md) is present in the compiled binary MLKitTextRecognitionCommon.framework. This raises compliance and privacy concerns, especially for apps being reviewed on the App Store.
https://issuetracker.google.com/issues/411157364