Hacker News Reader

Question for the developers: It looks like the iOS app allows you to download apps built with the desktop tool, which supports evaluation of Javascript snippets. Isn't this against the App Store policy for the download and execution of arbitrary code?

View on HN

Hi, one of the devs here! You're correct, PencilCase: Player can evaluate JavaScript using the JavaScriptCore framework included on the device. The App Store already has a lot of apps available that allow exactly this or other very similar options (Python, Lua, etc.) and we look forward to seeing how people take advantage of this ability.

The difference I'm specifically curious about is the issue about 'downloading' arbitrary code and evaluating it. Current app offerings don't have this support because Apple has forbidden it in the past unless the evaluation goes through the Javascript context of a web view, which doesn't appear to be the case for PencilCase. I guess I'm curious if they have relaxed their restrictions in this case, are unaware of that feature, or something else.

Yeah, App Store guidelines can be ambiguous, and JavaScriptCore becoming a public framework could be seen as an endorsement of this type of functionality, but we don't have any information that you wouldn't.

Not if it runs in with JavascriptCore I think.

Reply on news.ycombinator.com