[jira] [Created] (CB-2451) HTML5 audio/video tags bypass the whitelist

["Shazron Abdullah (JIRA)" <ji...@apache.org>]

Shazron Abdullah created CB-2451:
------------------------------------

             Summary: HTML5 audio/video tags bypass the whitelist
                 Key: CB-2451
                 URL: https://issues.apache.org/jira/browse/CB-2451
             Project: Apache Cordova
          Issue Type: Bug
          Components: iOS
    Affects Versions: 2.4.0, 2.3.0
            Reporter: Shazron Abdullah
            Assignee: Shazron Abdullah
             Fix For: 2.5.0


Looks like audio/video tags do bypass the whitelist due to our recent changes. This line returns nil when it shouldn't:
https://github.com/apache/cordova-ios/blob/e8a740176a465092b0d55dc9aee9a3e0ac314691/CordovaLib/Classes/CDVURLProtocol.m#L107

Tested using: 
{code}
        <audio controls="controls">
            <source src="http://cordova.apache.org/downloads/BlueZedEx.mp3" />
        </audio>
{code}


and in config.xml:
{code}
        <access origin="http://google.com" />
{code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira