iOS privacy manifest required

[stuartmorgan]

This plugin is listed on https://developer.apple.com/support/third-party-SDK-requirements/ as requiring a privacy manifest. Some action will be required, either to clarify with Apple whether this plugin should be on the list, or to add a privacy manifest.

See https://github.com/flutter/flutter/issues/131940 for context.

[github-actions[bot]]

👋 @stuartmorgan

NOTE: This comment is auto-generated.

Are you sure you have already searched for the same problem?

Some people open new issues but they didn't search for something similar or for the same issue. Please, search for it using the GitHub issue search box or on the official inappwebview.dev website, or, also, using Google, StackOverflow, etc. before posting a new one. You may already find an answer to your problem!

If this is really a new issue, then thank you for raising it. I will investigate it and get back to you as soon as possible. Please, make sure you have given me as much context as possible! Also, if you didn't already, post a code example that can replicate this issue.

In the meantime, you can already search for some possible solutions online! Because this plugin uses native WebView, you can search online for the same issue adding android WebView [MY ERROR HERE] or ios WKWebView [MY ERROR HERE] keywords.

Following these steps can save you, me, and other people a lot of time, thanks!

[pichillilorenzo]

Apple sent me an email about that a while ago but I didn’t understand what I needed to do. As you say in this comment about webview_flutter https://github.com/flutter/flutter/issues/131940#issuecomment-1846038911, this plugin doesn’t collect any kind of data per se. This is a plugin that offers a lot of features that could be used by other Flutter developers, but in that case this plugin is not responsible of what the developers is doing, as the developer could do the same also using native WKWebView API.

Have you figured it out? Do you have any advice? Thanks!

[stuartmorgan]

We don't currently have any more information than what is in the issue; we'll update as we learn more, but are also encouraging anyone who was contacted directly to reach out. Have you replied to Apple to explain your usage and ask what the expectation is for your use case?

[pichillilorenzo]

Ok thanks a lot! Not yet but I’m replying to them right now to ask more about it! I will let you know if I have any news 👍

[ShuheiSuzuki-07]

@pichillilorenzo

Nice to meet you, I have always been a fan of this plugin. Thank you very much.

This plugin uses OrderedSet, and OrderedSet seems to be included in the list that needs to be addressed. https://developer.apple.com/support/third-party-SDK-requirements/

After the PrivacyManifest support is completed on the OrderedSet side, do we need to incorporate it into flutter_inappwebview as well? If so, please let me know.

Please let me know if my understanding is incorrect.

I have created an issue on OrderedSet. I would like to create a PR if I have time... https://github.com/Weebly/OrderedSet/issues/41

[ueman]

In https://github.com/flutter/flutter/issues/131940#issuecomment-1881641272 it states, that plugins that do not collect data should include an empty privacy manifest. I'm assuming that holds true here too.

[pichillilorenzo]

@ueman yes, I think it should be that. Did the Flutter team already made an example for their plugins?

[ueman]

Yes, see https://github.com/flutter/packages/pull/5846

[pichillilorenzo]

Thanks, I will look at that as soon as possible 👍

[RMatushkin]

@pichillilorenzo Is there really a pressing need to use the OrderedSet plugin?

[percival888]

hello, the deadline is approaching, Is there any new development?

[phuc-tranh-otsv]

Hi @pichillilorenzo any update from your side for this issue? thank you for your time.

[ryukukimura]

Hello, @pichillilorenzo I hope you're doing well. Any updates? Thanks for your great work on this project!

[Samo8]

OrderedSet just released new version with PrivacyInfo, so the version of dependency could be raised also

[ShuheiSuzuki-07]

Will this actually be rejected by Apple in the review process if it is not addressed? Please let me know if you have any actual experience.

[stuartmorgan]

Will this actually be rejected by Apple in the review process if it is not addressed? Please let me know if you have any actual experience.

Individual experience on this is likely to vary:

• Anyone building their Pod dependencies statically won't have issues, because this plugin and OrderedSet won't appear as frameworks in the final binary in that case.
• In this update there is new language about the enforcement saying that it applies to "new or updated apps that have a newly added third-party SDK", so it doesn't sound like anyone already shipping an app using this plugin would be affected.

(It's also not actually clear that the plugin currently needs a privacy manifest, or if just updating the OrderedSet dependency will be enough. https://developer.apple.com/support/third-party-SDK-requirements/ lists flutter_inappwebview, not flutter_inappwebview_ios, whereas for most other plugins with a federated iOS implementation it is the implementation package that is listed. Given that, it's possible that only older versions of the plugin with the iOS implementation inline would currently trip the validation check, since for a build with a current version there would never be a flutter_inappwebview.framework in the build.)