Skip to content

[Bug report] Foreign Domain Found in ML Kit TextRecognition SDK #939

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
HassanTaleb90 opened this issue Apr 18, 2025 · 0 comments
Open
Assignees

Comments

@HassanTaleb90
Copy link

HassanTaleb90 commented Apr 18, 2025

ENVIRONMENT

  • OS version: 15.4 (24E248)
  • ML Kit APIs and versions: 8.0.0

STEPS

  1. Install the latest ML Kit Text Recognition pod (GoogleMLKit/TextRecognition)
  2. Search for suspicious domains in the built frameworks using: grep -r "nic.ir.md"
  3. Observe that the domain nic.ir.md is present in the compiled binary for MLKitTextRecognitionCommon

EXPECTED

No hardcoded references to unrelated or suspicious domains such as nic.ir.md should exist in production ML Kit SDK binaries, especially when unrelated to the SDK’s functionality.

ACTUAL

A suspicious domain (nic.ir.md) is present in the compiled binary MLKitTextRecognitionCommon.framework. This raises compliance and privacy concerns, especially for apps being reviewed on the App Store.

https://issuetracker.google.com/issues/411157364

image
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants