[iOS security] Some capacitor plugins are NOT enabled Stack Canary

[kientrant1]

Bug Report

The security team just report an issue about "Not enabled Stack Canary" in some capacitor plugins. Can you help to have a look and see if possible to fix it?

Plugin(s)

1. CapacitorPreferences.framework/CapacitorPreferences
2. CapacitorPushNotifications.framework/CapacitorPushNoti
   fications
3. CapacitorBrowser.framework/CapacitorBrowser
4. CapacitorApp.framework/CapacitorApp

Some other plugins are also reported with the same issue (whether we can apply a configuration at Ionic project level or not)
5. WhiteguruCapacitorPluginFileOpener.framework/Whitegu
ruCapacitorPluginFileOpener - https://github.com/dragermrb/capacitor-plugin-file-opener
6. CapacitorSecureStoragePlugin.framework/CapacitorSecure
StoragePlugin - https://github.com/martinkasa/capacitor-secure-storage-plugin

Capacitor Version

Capacitor v5

Platform(s)

iOS

Current Behavior

Not enabled Stack Canary

Expected Behavior

Need to be enable Stack Canary

[kientrant1]

This seems like from missing Apply configuration "-fstack-protector-all” in the "Other C Flags" section of Build Settings under frameworks. As workaround, I think we can consider with adding some script in Podfile. It can override some default configuration after pod installing.

[eric-horodyski]

This thread has been inactive for some time, and we’re cleaning up older items to keep the backlog focused and manageable.

Details on the effort:
https://ionic.io/blog/keeping-capacitors-backlog-healthy

If this is still relevant today, feel free to open a new issue with current information and we’ll review it.

[ionitron-bot]

Thanks for the issue! This issue is being locked to prevent comments that are not relevant to the original issue. If this is still an issue with the latest version of the plugin, please create a new issue and ensure the template is fully filled out.