Content Filter Permission Prompt Not Appearing in TestFlight

App & System Services Networking Swift Network Extension

Created Jan ’25

Replies 20

Boosts 1

Participants 3

I added a Content Filter to my app, and when running it in Xcode (Debug/Release), I get the expected permission prompt: "Would like to filter network content (Allow / Don't Allow)".

However, when I install the app via TestFlight, this prompt doesn’t appear at all, and the feature doesn’t work.

Is there a special configuration required for TestFlight? Has anyone encountered this issue before?

Thanks!

Answered by DTS Engineer in 823043022

What platform is this for?

I suspect you’re targeting iOS, in which case you’re probably hitting the deployment limit for content filters on that platform. TN3134 Network Extension provider deployment discusses that.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Boost

DTS Engineer OP

Apple

OK. But you have the code for the PIRProcessDatabase tool, right? So how about you step through it to see where it throws this error?

Keep in mind that PIR Service Example isn’t a set of tools, like Xcode, where you’re limited to just running the tool and that’s that. Rather, it’s sample code for you to explore, and then use the results to inform the development of the server-side of your system.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

lilan OP

Yes, I was following the document and run this on my mac https://github.com/apple/swift-homomorphic-encryption/tree/main/Sources/PIRProcessDatabase

I checked it and can't find exactly where it throws this error.

For the PIR Service Example, yes I understand that. I tried to follow the https://swiftpackageindex.com/apple/pir-service-example/main/documentation/pirservice/testinginstructionsneurlfilter

And expect that it will at least give me a sense of how all of this works. Are you saying that it won't work if we just follow this guide? I want to test if the function is properly working first using the guide. So I can change the configuration later based on my needs.

DTS Engineer OP

Apple

Are you saying that it won't work if we just follow this guide?

No, I believe that your saying that (-:

I’m saying that this is open source, which gives you the opportunity to debug these problems yourself, engage with the developers directly, and even submit pull requests with fixes.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

lilan OP

I've been able to run the server on our linux server. What's the submission form for NEURLFilter? I found this one for live caller id? https://developer.apple.com/contact/request/live-caller-id-lookup/

We still have to do a submission for NEURLFilter right? for the PIR service part.

DTS Engineer OP

Apple

I’m glad to hear that you’re making progress.

We still have to do a submission for NEURLFilter right?

Yes. Specifically, there’s a process for onboarding with the Oblivious HTTP relay. You can find a link to the submission form at the bottom of How to onboard with an Oblivious HTTP relay hosted by Apple.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"