Change theme
Help
Press space for more information.
Show links for this issue (Shortcut: i, l)
Copy issue ID
Previous Issue (Shortcut: k)
Next Issue (Shortcut: j)
Sign in to use full features.
Vote: I am impacted
Notification menu
Refresh (Shortcut: Shift+r)
Go home (Shortcut: u)
Pending code changes (auto-populated)
Needs more info comment that > 10 days [ID: 963198]
Comment such as: SPAM, non-actionable [ID: 963127]
Resolved actionable follow-up comments [ID: 963027]
View issue level access limits(Press Alt + Right arrow for more information)
Attachment actions
Unintended behavior
View staffing
Description
We are currently working on an app where we are using the following SDKs. During our vulnerability assessment, the report indicates that debug symbols are available in the IPA file. We encountered this issue only after including the Google SDK pods mentioned below. Even after updating to the latest versions of the SDKs, the issue persists.
The pods in use are:
pod 'GoogleMaps', ~> 4.1.0
pod 'Google-Maps-iOS-Utils', ~> 4.0.0
We have attempted several configuration changes in the pod settings to disable debug symbols, but the issue has not been resolved. The settings we tried are as follows:
Strip Debug Symbols During Copy: YES
Deployment Post processing: YES
Strip Linked Product: YES
Generate Debug Symbols: NO
Despite these changes, the debug symbols are still present in the IPA file. Could you please guide us on how to properly disable (strip) the debug symbols for the above pods in the IPA file?
Even if we add the SDKs directly to the project, the issue still occurs. Please help disable the debug symbols in the SDKs.
GoogleMaps.xcframework
GoogleMapsBase.xcframework
GoogleMapsCore.xcframework
GoogleMapsUtils.xcframework
Attached is the sample vulnerability report for your reference.
Thank you for your assistance!