简体繁体 English

Unity iOS构建最佳实践

[英]Unity iOS Build Best Practice

原文 2018-04-27 06:27:54 5 1 ios/ security/ unity3d/ build

So I need to send someone an iOS project made through unity. 因此，我需要向某人发送一个通过统一完成的iOS项目。 I wanted to know if there are any security flaws in the built application. 我想知道所构建的应用程序中是否存在任何安全漏洞。

If I send someone these files (not compiled ipa from xcode, the files unity gives me) could they reverse engineer it and find my code? 如果我将这些文件发送给某人（不是从xcode编译过的ipa，则文件统一给我），他们可以对它进行反向工程并找到我的代码吗？

Are there any specific player settings that could minimize this risk? 是否有任何可以将这种风险最小化的特定播放器设置？

1 个解决方案

If I send someone these files (not compiled ipa from xcode, the files unity gives me) could they reverse engineer it and find my code? 如果我将这些文件发送给某人（不是从xcode编译过的ipa，则文件统一给我），他们可以对它进行反向工程并找到我的代码吗？

Yes. 是。 You are generating Xcode project files and some of the scripts and resources are visible and can easily be modified. 您正在生成Xcode项目文件，并且某些脚本和资源是可见的，可以轻松进行修改。

Are there any specific player settings that could minimize this risk? 是否有任何可以将这种风险最小化的特定播放器设置？

You can make it harder to modify your script. 您可以使修改脚本变得更加困难。 Setting the Scripting Backend to Mono produces managed code which can easily be viewed with software like ILSpy and can be modified by other programs too. 将脚本后端设置为Mono可以生成托管代码，可以使用ILSpy之类的软件轻松查看托管代码，也可以通过其他程序进行修改。

Changing the the Scripting Backend to IL2CPP makes it harder to view and temper with the code but it can still be done if the person spends more time to reverse it. 将脚本后端更改为IL2CPP使得查看和修改代码变得更加困难，但是如果人们花更多的时间来反转它，仍然可以完成。

If you really don't want to expose your app easily, don't share your Unity project, don't share the Xcode project. 如果您确实不想轻易公开您的应用程序，请不要共享您的Unity项目，也不要共享Xcode项目。 If all you want is for the other person to test the app, build the Xcode project and share the .ipa file. 如果您只想让其他人测试该应用程序，请构建Xcode项目并共享.ipa文件。 You can also share the build with the other person through iTunes Connect . 您还可以通过iTunes Connect与其他人共享构建。