[jira] [Commented] (CB-9568) Update whitelist plugin to allow all network access by default

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CB-9568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14741695#comment-14741695 ] 

ASF subversion and git services commented on CB-9568:
-----------------------------------------------------

Commit 715491a599d97eed11c0f245cafe2fc596004665 in cordova-plugin-whitelist's branch refs/heads/master from [~shazron]
[ https://git-wip-us.apache.org/repos/asf?p=cordova-plugin-whitelist.git;h=715491a ]

CB-9568 - Update whitelist plugin to allow all network access by default


> Update whitelist plugin to allow all network access by default
> --------------------------------------------------------------
>
>                 Key: CB-9568
>                 URL: https://issues.apache.org/jira/browse/CB-9568
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Plugin Whitelist
>         Environment: iOS
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>              Labels: cordova-ios-4.0.x
>
> Basically the default for the access tag, if it's not present is the wildcard "*"
> It's as if this tag is there if not present:
> <access origin="*" />
> ML thread: http://markmail.org/message/j3kd4lug65jdiiba
> From Carlos:
> {code}
> But we need better docs to explain the differences between legacy-whitelist
> and whitelist
> And more detailed explanation on how to create a proper config.xml that
> works across the board for ios and android. What about windows?
> Also to look on how to have a good config.xml in hello-world template,
> since most users will start with this first and I would like to be secure
> by default and they open. meaning rely on CSP, and only use config.xml for
> x, y, z
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org