JSON security considerations

Because files are not encrypted when they are added to your distributed app package, you should take security precautions.

Do not store the URL to the server that provides the JSON array for this configuration option in the app file Localizable.strings or the Settings bundle and use the keywords string: or resource: or setting: to load it from MyConfiguration.plist.

These files are not encrypted when added to your distributed app package and are in clear text form.

Instead, you can safely store this URL directly in the file MyConfiguration.plist. The file MyConfiguration.plist is processed during the app build, and its contents are converted to code in the app binary file.

Related reference