You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by GitBox <gi...@apache.org> on 2022/01/24 21:10:18 UTC
[GitHub] [cordova] globules-io opened a new issue #316: Have Cordova the option to copy www content to a R/W dir and use R/W dir instead for root
globules-io opened a new issue #316:
URL: https://github.com/apache/cordova/issues/316
# Feature Request
## Motivation Behind Feature
<!-- Why should this feature be implemented? What problem does it solve? -->
The motivation behind this , is to be able to have the root writable so updating the app www from itself is possible.
It allows dev to make smaller modifications without the hassle of submitting the app for review again.
Also great if you have "live" bugs.
## Feature Description
<!--
Describe your feature request in detail
Please provide any code examples or screenshots of what this feature would look like
Are there any drawbacks? Will this break anything for existing users?
-->
- package app as usual
- have a flag in config.xml
- on first run, if flag is found and the content hasn't been copied yet , create/copy www to a R/W folder
- set new root of webview to the new folder
Then from the app, one can check for a new version on his remote server and download/update the R/W folder.
Might be more gracious as a plugin but I don't think it can be done yet.
## Alternatives or Workarounds
<!--
Describe alternatives or workarounds you are currently using
Are there ways to do this with existing functionality?
-->
Workaround for us right now is storing downloaded content in localStorage but is limited to HTML
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek edited a comment on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek edited a comment on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is potentially a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, you are breaking the terms, and Apache Cordova can't facilitate a feature which encourages that behavior.
I know easily updating webview assets is desirable for development, in which case the `cordova serve` should be sufficient. it provides a webserver hosting the platform specific JS files as well as your web assets and your `<content src>` config can be set accordingly to the platform's index.html that you're working on.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek commented on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek commented on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, you are breaking the terms, and Cordova can't facilitate a feature which encourages that behavior.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek edited a comment on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek edited a comment on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is potentially a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, you are breaking the terms, and Apache Cordova can't facilitate a feature which encourages that behavior.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] globules-io closed issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
globules-io closed issue #316:
URL: https://github.com/apache/cordova/issues/316
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek edited a comment on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek edited a comment on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is potentially a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, then the terms of service are being broken and Apache Cordova can't facilitate a feature which encourages that behavior.
In-app updates is mostly restricted to non-executable code updates such as data files.
For other platforms (e.g. Electron) it might be possible but someone more knowledgeable will need to chip in. I'd still really be concern of having application code writable (defeats code signing features for example).
I know easily updating webview assets is desirable for development, in which case the `cordova serve` should be sufficient. it provides a webserver hosting the platform specific JS files as well as your web assets and your `<content src>` config can be set accordingly to the platform's index.html that you're working on.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek edited a comment on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek edited a comment on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is potentially a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, you are breaking the terms, and Apache Cordova can't facilitate a feature which encourages that behavior.
In-app updates is mostly restricted to non-executable code updates such as data files.
I know easily updating webview assets is desirable for development, in which case the `cordova serve` should be sufficient. it provides a webserver hosting the platform specific JS files as well as your web assets and your `<content src>` config can be set accordingly to the platform's index.html that you're working on.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek edited a comment on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek edited a comment on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] globules-io commented on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
globules-io commented on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020658585
Thanks for your reply @breautek
One can only dream iOS review process be fast and fair. I will close this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] globules-io commented on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
globules-io commented on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020658585
Thanks for your reply @breautek
One can only dream iOS review process be fast and fair. I will close this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek edited a comment on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek edited a comment on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is potentially a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, you are breaking the terms, and Cordova can't facilitate a feature which encourages that behavior.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] globules-io closed issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
globules-io closed issue #316:
URL: https://github.com/apache/cordova/issues/316
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org
[GitHub] [cordova] breautek commented on issue #316: Have the option to copy www content to a R/W dir and use R/W dir instead for root
Posted by GitBox <gi...@apache.org>.
breautek commented on issue #316:
URL: https://github.com/apache/cordova/issues/316#issuecomment-1020585289
Not only this is a huge security risk having executable code in a writable area.
It's also against app store terms of service breaking [section 2.5.2 on iOS](https://developer.apple.com/app-store/review/guidelines/#software-requirements) and Google's [Device and Network Abuse](https://support.google.com/googleplay/android-developer/answer/11498144?hl=en) policy.
iOS:
>Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.
Android/Google Play Store:
>An app distributed via Google Play may not modify, replace, or update itself using any method other than Google Play's update mechanism.
Generally speaking, if you're bypassing the review process, you are breaking the terms, and Cordova can't facilitate a feature which encourages that behavior.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org