You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "Brandon Paddock (JIRA)" <ji...@apache.org> on 2015/03/08 21:52:38 UTC

[jira] [Created] (CB-8632) Plugin should use x-ms-webview and not iframe on Windows 8.1+

Brandon Paddock created CB-8632:
-----------------------------------

             Summary: Plugin should use x-ms-webview and not iframe on Windows 8.1+
                 Key: CB-8632
                 URL: https://issues.apache.org/jira/browse/CB-8632
             Project: Apache Cordova
          Issue Type: Bug
          Components: Plugin InAppBrowser
    Affects Versions: 3.5.0
         Environment: Windows 8.1, Windows Phone 8.1
            Reporter: Brandon Paddock


Currently, the InAppBrowser plug-in uses an iframe when running on Windows 8.1 and Windows Phone 8.1. This is severely limiting and causes things to fail which work fine on other platforms.

A key example is trying to host my own site's content in the app. Our server specifies X-Frame-Options: SAMEORIGIN in its HTTP response headers. This has no effect on normal WebView controls, which ignore this by design. However, the iframe that this plug-in uses respects it, giving this error:

APPHOST9613: The app couldn’t navigate to https://devtest1.zealyst.com/Account/Login?ReturnUrl=%2F because of this error: FORBIDFRAMING.

Since Windows provides a native WebView control (which works inside WWAHost web apps and is accessible as the x-ms-webview HTML element type), the plug-in should be updated to use this when it's available.

There are other advantages to doing this versus the X-Frame-Options issue I mentioned (which I can perhaps do an annoying UA-based workaround for I suppose), such as:
1) Separate UI thread/process/AppContainer (depending on OS version).
2) Behaviors and API surface more tuned to WebView (and in-app browser) scenarios.
3) Customizable user agent, etc.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org