[jira] [Commented] (CB-12145) Since Android 5 third party cookies cannot be accepted by the browser due to default policy settings

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CB-12145?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16163151#comment-16163151 ] 

ASF GitHub Bot commented on CB-12145:
-------------------------------------

Github user shaggy8871 commented on the issue:

    https://github.com/apache/cordova-plugin-inappbrowser/pull/198
  
    This patch works well when applied manually. To enable, pass `acceptThirdPartyCookies` as an option to `open()`:
    
    ```
    cordova.InAppBrowser.open('<domain>', '_blank', 'acceptThirdPartyCookies=yes');
    ```


> Since Android 5 third party cookies cannot be accepted by the browser due to default policy settings
> ----------------------------------------------------------------------------------------------------
>
>                 Key: CB-12145
>                 URL: https://issues.apache.org/jira/browse/CB-12145
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: cordova-plugin-inappbrowser
>         Environment: Android 5+
>            Reporter: Tim Moxon
>            Priority: Minor
>              Labels: android, cookies, security
>   Original Estimate: 2h
>  Remaining Estimate: 2h
>
> Since Android Lollipop / version 5 the inappbrowser cannot accept third party cookies due to changes to the default policy from the OS. The main cordova platform now accepts them by default to handle various workflows in which they are necessitated, however the inappbrowser hasn't yet followed suit.
> In my particular usage scenario this creates problems with an opened browser not being able to pass through an oauth flow to another site in the background. 
> I have a fix for this which I will commit now in association with this ticket.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org