You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by st...@apache.org on 2015/10/29 23:46:35 UTC

ios commit: CB-9870 updated hello world template

Repository: cordova-ios
Updated Branches:
  refs/heads/master 816fceebc -> 0348c369b


CB-9870 updated hello world template


Project: http://git-wip-us.apache.org/repos/asf/cordova-ios/repo
Commit: http://git-wip-us.apache.org/repos/asf/cordova-ios/commit/0348c369
Tree: http://git-wip-us.apache.org/repos/asf/cordova-ios/tree/0348c369
Diff: http://git-wip-us.apache.org/repos/asf/cordova-ios/diff/0348c369

Branch: refs/heads/master
Commit: 0348c369b45d1061c5b48415350ef208054eda7e
Parents: 816fcee
Author: Steve Gill <st...@gmail.com>
Authored: Thu Oct 29 15:46:30 2015 -0700
Committer: Steve Gill <st...@gmail.com>
Committed: Thu Oct 29 15:46:30 2015 -0700

----------------------------------------------------------------------
 bin/templates/project/www/img/logo.png | Bin 21814 -> 21813 bytes
 bin/templates/project/www/index.html   |  11 ++++++++++-
 2 files changed, 10 insertions(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cordova-ios/blob/0348c369/bin/templates/project/www/img/logo.png
----------------------------------------------------------------------
diff --git a/bin/templates/project/www/img/logo.png b/bin/templates/project/www/img/logo.png
index 9519e7d..1266df7 100755
Binary files a/bin/templates/project/www/img/logo.png and b/bin/templates/project/www/img/logo.png differ

http://git-wip-us.apache.org/repos/asf/cordova-ios/blob/0348c369/bin/templates/project/www/index.html
----------------------------------------------------------------------
diff --git a/bin/templates/project/www/index.html b/bin/templates/project/www/index.html
index 564e097..646f9cb 100755
--- a/bin/templates/project/www/index.html
+++ b/bin/templates/project/www/index.html
@@ -19,7 +19,16 @@
 -->
 <html>
     <head>
-        <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap:; style-src 'self' 'unsafe-inline'; media-src *">
+        <!--
+        Customize this policy to fit your own app's needs. For more guidance, see:
+            https://github.com/apache/cordova-plugin-whitelist/blob/master/README.md#content-security-policy
+        Some notes:
+            * gap: is required only on iOS (when using UIWebView) and is needed for JS->native communication
+            * https://ssl.gstatic.com is required only on Android and is needed for TalkBack to function properly
+            * Disables use of inline scripts in order to mitigate risk of XSS vulnerabilities. To change this:
+                * Enable inline JS: add 'unsafe-inline' to default-src
+        -->
+        <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *">
         <meta name="format-detection" content="telephone=no">
         <meta name="msapplication-tap-highlight" content="no">
         <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width">


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org