CoreData Transformable Types and SecureCoding

Question

Created Feb ’24

Replies 3

Boosts 0

Views 1k

Participants 3

I have a CoreData entity with a transformable property data that stores an NSDictionary. All of the classes inside the dictionary conform to NSSecureCoding

I have been getting many instances of this warning : 'NSKeyedUnarchiveFromData' should not be used to for un-archiving and will be removed in a future release

In trying to clean up the warning and future-proof my app, but I am running into a lot of trouble.

My understanding is that using NSKeyedUnarchiveFromData as the transformer in my data properties attribute should work, since the top level class is a dictionary and all of the contents conform to NSSecureCoding.

However, my data dictionary is now coming back as NSConcreteMutableData so I cannot access the data in it.

I have also tried creating a custom value transformer with additional allowedTopLevelClasses, but that hasn't helped, and again, the topLevel type is an NSDictionary, which should be allowed.

Thank you for any guidance.

Boost

Answer 1

Easiwriter OP

Feb ’24

You need to add an example of your code.

0

Answer 2

DTS Engineer OP

Apple

Feb ’24

Easiwriter wrote:

You need to add an example of your code.

Yes, that’d help.

To get you started, check out the example of secure coding in Objective-C in this thread.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 3

benkamen OP

Feb ’24

Accepted Answer

Thanks. The relevant piece that I was missing is that it's not just the literal topLevelClasses that need to be registered with the NSSecureUnarchiveFromDataTransformer, but also any classes contained in the transformable if it's a collection. Therefore, if my NSDictionary has a custom class inside it, I need to register a subclass of NSSecureUnarchiveFromDataTransformer to allow that class.

@objc
class DataTransformer: NSSecureUnarchiveFromDataTransformer {
 
    static let name = NSValueTransformerName(rawValue: String(describing: DataTransformer.self))

    @objc(registerValueTransformer)
    public static func register() {
         let transformer = DataTransformer()
        print(DataTransformer.allowedTopLevelClasses)
         ValueTransformer.setValueTransformer(transformer, forName: name)
     }
    
    override class var allowedTopLevelClasses: [AnyClass] {
        var topLevelClasses = super.allowedTopLevelClasses
        let myClasses = [MyClass.self, MyOtherClass.self]
        topLevelClasses.append(contentsOf: myClasses)
        return topLevelClasses
    }

}

1