You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by ja...@apache.org on 2020/12/02 09:23:55 UTC
svn commit: r1884020 [2/4] - in /cordova/site/public: ./
docs/en/3.0.0/guide/appdev/whitelist/ docs/en/3.1.0/guide/appdev/whitelist/
docs/en/3.2.0/guide/appdev/whitelist/ docs/en/3.3.0/guide/appdev/whitelist/
docs/en/3.4.0/guide/appdev/whitelist/ docs/...
Added: cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html
URL: http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html?rev=1884020&view=auto
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html (added)
+++ cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html Wed Dec 2 09:23:53 2020
@@ -0,0 +1,2814 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+ <meta charset="utf-8">
+ <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+ <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+ <meta name="format-detection" content="telephone=no">
+ <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width" />
+ <meta name="description" content="Securely grant an application access to external resources. ">
+
+ <title>
+
+
+ Allow List Guide - Apache Cordova
+
+
+ </title>
+
+ <link rel="SHORTCUT ICON" href="/favicon.ico"/>
+
+
+
+
+
+
+
+
+
+
+ <link rel="canonical" href="https://cordova.apache.org/docs/en/dev/guide/appdev/allowlist/">
+
+ <!-- CSS -->
+ <link rel="stylesheet" type="text/css" href="/static/css/main.css">
+ <link rel="stylesheet" type="text/css" href="/static/css/lib/syntax.css">
+ <!-- Algolia Search CSS -->
+ <link rel="stylesheet" href="https://cdn.jsdelivr.net/docsearch.js/1/docsearch.min.css" />
+
+ <!-- Fonts -->
+ <!-- For attribution information, see www/attributions.html -->
+ <link href='https://fonts.googleapis.com/css?family=Raleway:700,400,300,700italic,400italic,300italic' rel='stylesheet' type='text/css'>
+
+ <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
+ <!--[if lt IE 9]>
+ <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
+ <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
+ <![endif]-->
+ <script type="text/javascript">
+ var disqus_developer = 1; // this would set it to developer mode
+ </script>
+
+ <!-- JS -->
+ <script defer type="text/javascript" src="/static/js/lib/jquery-2.1.1.min.js"></script>
+ <script defer type="text/javascript" src="/static/js/lib/bootstrap.min.js"></script>
+
+ <script>
+ (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
+ m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+ })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+ ga('create', 'UA-64283057-3', 'auto');
+ ga('send', 'pageview');
+</script>
+
+</head>
+
+<body>
+ <header>
+ <a class="scroll-point pt-top" name="top"></a>
+ <nav class="navbar navbar-inverse navbar-fixed-top">
+ <div class="container-fluid">
+ <div class="navbar-header">
+ <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar" aria-expanded="false" aria-controls="navbar">
+ <span class="sr-only">Toggle navigation</span>
+ <span class="icon-bar"></span>
+ <span class="icon-bar"></span>
+ <span class="icon-bar"></span>
+ </button>
+ <a class="navbar-brand" href="/"><img id="logo_top" src="/static/img/cordova-logo-newbrand.svg"/></a>
+ </div>
+ <div id="navbar" class="navbar-collapse collapse">
+ <div class="nav_bar_center">
+ <ul class="nav navbar-nav">
+ <li class="active">
+ <a href="/docs/en/latest/">Documentation</a>
+ </li>
+ <li >
+ <a href="/plugins">Plugins</a>
+ </li>
+ <li >
+ <a href="/blog" id="blog_button">Blog<span class="badge" id="new_blog_count"></span></a>
+ </li>
+ <li >
+ <a href="/contribute">Contribute</a>
+ </li>
+ <li >
+ <a href="/contribute/team.html">Team</a>
+ </li>
+ <li>
+ <a href="/#getstarted">Get Started</a>
+ </li>
+ <li>
+ <form class="navbar-form navbar-right" id="header-search-form" role="search">
+ <div class="input-group">
+
+
+
+ <input id="header-search-field" type="text" placeholder="Search 'dev' docs..." class="form-control hidden-xs" autocomplete="off">
+ </div>
+ </form>
+ </li>
+ </ul>
+ </div>
+ </div><!--/.navbar-collapse -->
+ </div>
+ </nav>
+ <div id="_fixed_navbar_spacer" style="padding-top:50px"></div>
+</header>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<div class="docs">
+
+ <!-- Table of Contents -->
+ <div class="hidden-xs hidden-sm site-toc-container">
+ <ul class="site-toc">
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Introduction
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../guide/overview/index.html">
+ Overview
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Create apps
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../guide/cli/index.html">
+ Create your first app
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/cli/template.html">
+ Templates for apps
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/support/index.html">
+ Platform support
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Develop for platforms
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/android/index.html">
+ Android
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/ios/index.html">
+ iOS
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/windows/index.html">
+ Windows
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/osx/index.html">
+ OS X
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/electron/index.html">
+ Electron
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../platform_plugin_versioning_ref/index.html">
+ Manage versions and platforms
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../platform_pinning/index.html">
+ Platform pinning
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../config_ref/images.html">
+ Customize icons
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../cordova/storage/storage.html">
+ Store data
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/appdev/privacy/index.html">
+ Manage privacy
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/appdev/security/index.html">
+ Manage security
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="this-page" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
+ </a>
+
+ <span class="entry-highlight"></span>
+
+
+
+
+ <div id="page-toc" class="page-toc"></div>
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Create plugins
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../guide/hybrid/plugins/index.html">
+ Create a plugin
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Develop for platforms
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/android/plugin.html">
+ Android
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/ios/plugin.html">
+ iOS
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/platforms/windows/plugin.html">
+ Windows
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../plugin_ref/plugman.html">
+ Use Plugman
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Advanced Topics
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../guide/hybrid/webviews/index.html">
+ Embed Cordova in native apps
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/next/index.html">
+ Next Steps
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Reference
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../config_ref/index.html">
+ Config.xml
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../cordova/events/events.html">
+ Events
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-cli/index.html">
+ CLI Reference
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../guide/appdev/hooks/index.html">
+ Hooks
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../plugin_ref/spec.html">
+ Plugin.xml
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <span class="toc-section-heading">
+ Plugin APIs
+ </span>
+
+
+
+
+
+
+ <ul class="site-toc">
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-battery-status/index.html">
+ Battery Status
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-camera/index.html">
+ Camera
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-device/index.html">
+ Device
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-dialogs/index.html">
+ Dialogs
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-file/index.html">
+ File
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-geolocation/index.html">
+ Geolocation
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-inappbrowser/index.html">
+ Inappbrowser
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-media/index.html">
+ Media
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-media-capture/index.html">
+ Media Capture
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-network-information/index.html">
+ Network Information
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-screen-orientation/index.html">
+ Screen Orientation
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-splashscreen/index.html">
+ Splashscreen
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-statusbar/index.html">
+ Statusbar
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+
+ <li>
+
+ <a class="" href="../../../reference/cordova-plugin-vibration/index.html">
+ Vibration
+ </a>
+
+
+
+
+
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+</ul>
+
+
+ </li>
+
+</ul>
+
+ </div>
+
+ <!-- Page content -->
+ <div class="page-content-container">
+ <div class="page-content">
+ <div class="content-header">
+
+ <!-- ToC Dropdown (for XS and SM sizes only) -->
+ <div class="toc-dropdown dropdown visible-xs-block visible-sm-block">
+ <button class="btn btn-default dropdown-toggle" type="button" id="tocDropdown" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
+ Table of Contents
+ <span class="caret"></span>
+ </button>
+ <ul class="dropdown-menu">
+
+
+
+
+
+<li>
+ <a class="" href="../../../guide/overview/index.html">
+ Overview
+ </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../guide/cli/index.html">
+ Create your first app
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/cli/template.html">
+ Templates for apps
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/support/index.html">
+ Platform support
+ </a>
+</li>
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/android/index.html">
+ Android
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/ios/index.html">
+ iOS
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/windows/index.html">
+ Windows
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/osx/index.html">
+ OS X
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/electron/index.html">
+ Electron
+ </a>
+</li>
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../platform_plugin_versioning_ref/index.html">
+ Manage versions and platforms
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../platform_pinning/index.html">
+ Platform pinning
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../config_ref/images.html">
+ Customize icons
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../cordova/storage/storage.html">
+ Store data
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/appdev/privacy/index.html">
+ Manage privacy
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/appdev/security/index.html">
+ Manage security
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="this-page" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
+ </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../guide/hybrid/plugins/index.html">
+ Create a plugin
+ </a>
+</li>
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/android/plugin.html">
+ Android
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/ios/plugin.html">
+ iOS
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/platforms/windows/plugin.html">
+ Windows
+ </a>
+</li>
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../plugin_ref/plugman.html">
+ Use Plugman
+ </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../guide/hybrid/webviews/index.html">
+ Embed Cordova in native apps
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/next/index.html">
+ Next Steps
+ </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../config_ref/index.html">
+ Config.xml
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../cordova/events/events.html">
+ Events
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-cli/index.html">
+ CLI Reference
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../guide/appdev/hooks/index.html">
+ Hooks
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../plugin_ref/spec.html">
+ Plugin.xml
+ </a>
+</li>
+
+
+
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-battery-status/index.html">
+ Battery Status
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-camera/index.html">
+ Camera
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-device/index.html">
+ Device
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-dialogs/index.html">
+ Dialogs
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-file/index.html">
+ File
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-geolocation/index.html">
+ Geolocation
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-inappbrowser/index.html">
+ Inappbrowser
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-media/index.html">
+ Media
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-media-capture/index.html">
+ Media Capture
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-network-information/index.html">
+ Network Information
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-screen-orientation/index.html">
+ Screen Orientation
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-splashscreen/index.html">
+ Splashscreen
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-statusbar/index.html">
+ Statusbar
+ </a>
+</li>
+
+
+
+
+<li>
+ <a class="" href="../../../reference/cordova-plugin-vibration/index.html">
+ Vibration
+ </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+ </ul>
+ </div>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a class="edit" href="https://github.com/apache/cordova-docs/tree/master/www/docs/en/dev/guide/appdev/allowlist/index.md"><span class="glyphicon glyphicon-pencil" aria-hidden="true"></span> Edit Source on GitHub</a>
+
+
+
+ <!-- Language dropdown -->
+ <div class="dropdown">
+ <button class="btn btn-default dropdown-toggle" type="button" id="languageDropdown" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
+ English
+ <span class="caret"></span>
+ </button>
+
+ <!-- List all languages -->
+ <ul class="dropdown-menu" aria-labelledby="languageDropdown">
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/de/dev/guide/appdev/allowlist/index.html" class="">
+
+ Deutsch
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/en/dev/guide/appdev/allowlist/index.html" class="">
+
+ <span class="selected">
+ English
+ </span>
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/es/dev/guide/appdev/allowlist/index.html" class="">
+
+ Español
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/fr/dev/guide/appdev/allowlist/index.html" class="">
+
+ Français
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/it/dev/guide/appdev/allowlist/index.html" class="">
+
+ Italiano
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/ja/dev/guide/appdev/allowlist/index.html" class="">
+
+ æ¥æ¬èª
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/ko/dev/guide/appdev/allowlist/index.html" class="">
+
+ íêµì´
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/pl/dev/guide/appdev/allowlist/index.html" class="">
+
+ Polski
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/ru/dev/guide/appdev/allowlist/index.html" class="">
+
+ Ð ÑÑÑкий
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/sl/dev/guide/appdev/allowlist/index.html" class="">
+
+ Slovene
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/zh-cn/dev/guide/appdev/allowlist/index.html" class="">
+
+ ç®ä½ä¸æ
+
+ </a>
+ </li>
+
+
+
+
+
+
+
+
+
+
+
+
+ <li>
+ <a href="/docs/zh-tw/dev/guide/appdev/allowlist/index.html" class="">
+
+ ç¹é«ä¸æ
+
+ </a>
+ </li>
+
+ </ul>
+ </div>
+
+ <!-- Version dropdown -->
+ <div class="dropdown">
+ <button class="btn btn-default dropdown-toggle" type="button" id="versionDropdown" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
+ dev
+
+ <span class="caret"></span>
+ </button>
+ <ul class="dropdown-menu" aria-labelledby="versionDropdown">
+
+ <!-- List versions available in this language -->
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/dev/guide/appdev/allowlist/index.html" class="">
+
+ <span class="selected">
+
+ dev
+
+
+ </span>
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/latest/" class="missing-page">
+
+
+ 9.x
+
+ (Latest)
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/8.x/" class="missing-page">
+
+
+ 8.x
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/7.x/" class="missing-page">
+
+
+ 7.x
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/6.x/" class="missing-page">
+
+
+ 6.x
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/5.4.0/" class="missing-page">
+
+
+ 5.4.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/5.1.1/" class="missing-page">
+
+
+ 5.1.1
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/5.0.0/" class="missing-page">
+
+
+ 5.0.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/4.0.0/" class="missing-page">
+
+
+ 4.0.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.6.0/" class="missing-page">
+
+
+ 3.6.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.5.0/" class="missing-page">
+
+
+ 3.5.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.4.0/" class="missing-page">
+
+
+ 3.4.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.3.0/" class="missing-page">
+
+
+ 3.3.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.2.0/" class="missing-page">
+
+
+ 3.2.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.1.0/" class="missing-page">
+
+
+ 3.1.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/3.0.0/" class="missing-page">
+
+
+ 3.0.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.9.0/" class="missing-page">
+
+
+ 2.9.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.8.0/" class="missing-page">
+
+
+ 2.8.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.7.0/" class="missing-page">
+
+
+ 2.7.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.6.0/" class="missing-page">
+
+
+ 2.6.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.5.0/" class="missing-page">
+
+
+ 2.5.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.4.0/" class="missing-page">
+
+
+ 2.4.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.3.0/" class="missing-page">
+
+
+ 2.3.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.2.0/" class="missing-page">
+
+
+ 2.2.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.1.0/" class="missing-page">
+
+
+ 2.1.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/2.0.0/" class="missing-page">
+
+
+ 2.0.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.9.0/" class="missing-page">
+
+
+ 1.9.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.8.1/" class="missing-page">
+
+
+ 1.8.1
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.8.0/" class="missing-page">
+
+
+ 1.8.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.7.0/" class="missing-page">
+
+
+ 1.7.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.6.1/" class="missing-page">
+
+
+ 1.6.1
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.6.0/" class="missing-page">
+
+
+ 1.6.0
+
+
+
+ </a>
+ </li>
+
+ <li>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <a href="/docs/en/1.5.0/" class="missing-page">
+
+
+ 1.5.0
+
+
+
+ </a>
+ </li>
+
+ </ul>
+ </div>
+ </div>
+
+
+
+
+
+
+
+
+
+
+ <!-- Show warnings for special versions -->
+ <!-- dev warning -->
+
+ <div class="alert docs-alert alert-info" role="alert">
+ <button type="button" class="close" data-dismiss="alert" aria-label="Close">
+ <span aria-hidden="true">×</span>
+ </button>
+ This version of the documentation is under development!
+ <a href="/docs/en/latest/">
+ Click here for the latest released version.
+ </a>
+ </div>
+
+
+ <!-- outdated warning -->
+
+
+ <!-- plugin version warning -->
+
+
+ <div id="page-toc-source">
+ <h1>Allow List Guide</h1>
+
+<p>Domain allow listing is a security model that controls access to external domains over which your application has no control. Cordova provides a configurable security policy to define which external sites may be accessed.</p>
+
+<p>By default, new apps are configured to allow access to any site. Before moving your application to production, you should formulate an allow list to provide access to specific network domains and subdomains.</p>
+
+<p>While it is possible to implement your own allow list plugin, it is not recommended unless your app needs a very specific security policy.</p>
+
+<h2>Network Request Allow List</h2>
+
+<p>Cordova adheres to the <a href="http://www.w3.org/TR/widgets-access/">W3C Widget Access</a> specification, which relies on the <code><access></code> element within the app's <code>config.xml</code> file, which is located in the project's top-level directory.</p>
+
+<p>This controls which network requests (images, XHRs, etc) are allowed to be made to specific domains (via cordova native hooks).</p>
+
+<p>Note: It is suggested to use a <a href="#Content-Security-Policy-(CSP)">Content Security Policy (CSP)</a> (see below), which is more secure. This network request allow list is mostly historical for webviews which do not support CSP.</p>
+
+<p>In <code>config.xml</code>, add <code><access></code> tags, like this:</p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span class="c"><!-- Allow images, xhrs, etc. to google.com --></span>
+<span class="nt"><access</span> <span class="na">origin=</span><span class="s">"http://google.com"</span> <span class="nt">/></span>
+<span class="nt"><access</span> <span class="na">origin=</span><span class="s">"https://google.com"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Access to the subdomain maps.google.com --></span>
+<span class="nt"><access</span> <span class="na">origin=</span><span class="s">"http://maps.google.com"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Access to all the subdomains on google.com --></span>
+<span class="nt"><access</span> <span class="na">origin=</span><span class="s">"http://*.google.com"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Enable requests to content: URLs --></span>
+<span class="nt"><access</span> <span class="na">origin=</span><span class="s">"content:///*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Don't block any requests --></span>
+<span class="nt"><access</span> <span class="na">origin=</span><span class="s">"*"</span> <span class="nt">/></span>
+</code></pre></div>
+<p>Without any <code><access></code> tags, only requests to <code>file://</code> URLs are allowed. However, the default Cordova application includes <code><access origin="*"></code> by default.</p>
+
+<p>Note: Allow List cannot block network redirects from a allow listed remote website (i.e. <code>http</code> or <code>https</code>) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP.</p>
+
+<p>Be aware that some websites may automatically redirect from their home page to a different url. Example scenarios could be, but not limited to:</p>
+
+<ul>
+<li>Redirecting <code>http</code> protocol requests to the secure <code>https</code> SSL/TSL protocol.</li>
+<li>Redirecting to country-specific domain. E.g. <code>https://www.google.com</code> to redirect to <code>https://www.google.co.uk</code> based on device geography.</li>
+</ul>
+
+<p>Such scenarios may require modified or adding to the allow list additional entries beyond your initial requirement. Please consider this when building the app's allow list.</p>
+
+<p>Quirk: Android also allows requests to https://ssl.gstatic.com/accessibility/javascript/android/ by default, since this is required for TalkBack to function properly.</p>
+
+<h2>Navigation Allow List</h2>
+
+<p>This controls which URLs the WebView itself can be navigated to. It applies only to top-level navigations.</p>
+
+<p>By default navigations are only allowed to <code>file://</code> URLs. To allow others URLs, you must add <code><allow-navigation></code> tags to your <code>config.xml</code>:</p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span class="c"><!-- Allow links to example.com --></span>
+<span class="nt"><allow-navigation</span> <span class="na">href=</span><span class="s">"http://example.com/*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Wildcards are allowed for the protocol, as a prefix
+ to the host, or as a suffix to the path --></span>
+<span class="nt"><allow-navigation</span> <span class="na">href=</span><span class="s">"*://*.example.com/*"</span> <span class="nt">/></span>
+
+<span class="c"><!--
+ A wildcard can be used to allow the entire network, over HTTP and HTTPS.
+ This is *NOT RECOMMENDED*
+--></span>
+<span class="nt"><allow-navigation</span> <span class="na">href=</span><span class="s">"*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- The above is equivalent to these three declarations --></span>
+<span class="nt"><allow-navigation</span> <span class="na">href=</span><span class="s">"http://*/*"</span> <span class="nt">/></span>
+<span class="nt"><allow-navigation</span> <span class="na">href=</span><span class="s">"https://*/*"</span> <span class="nt">/></span>
+<span class="nt"><allow-navigation</span> <span class="na">href=</span><span class="s">"data:*"</span> <span class="nt">/></span>
+</code></pre></div>
+<p>Quirks: on Android it also applies to iframes for non-http(s) schemes.</p>
+
+<h2>Intent Allow List</h2>
+
+<p>This controls which URLs the app is allowed to ask the system to open.</p>
+
+<p>In <code>config.xml</code>, add <code><allow-intent></code> tags, like this:</p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span class="c"><!-- Allow links to web pages to open in a browser --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"http://*/*"</span> <span class="nt">/></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"https://*/*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Allow links to example.com to open in a browser --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"http://example.com/*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Wildcards are allowed for the protocol, as a prefix
+ to the host, or as a suffix to the path --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"*://*.example.com/*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Allow SMS links to open messaging app --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"sms:*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Allow tel: links to open the dialer --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"tel:*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Allow geo: links to open maps --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"geo:*"</span> <span class="nt">/></span>
+
+<span class="c"><!-- Allow all unrecognized URLs to open installed apps
+ *NOT RECOMMENDED* --></span>
+<span class="nt"><allow-intent</span> <span class="na">href=</span><span class="s">"*"</span> <span class="nt">/></span>
+</code></pre></div>
+<p>Without any <code><allow-intent></code> tags, no requests to external URLs are allowed. However, the default Cordova application includes a quite liberal set of <code>allow-intent</code> entries by default. It is advised to narrow this down based on each app's needs.</p>
+
+<p>On Android, this equates to sending an intent of type <strong>BROWSEABLE</strong>.</p>
+
+<p>This allow list applies only to the main Cordova webview, and does not apply to any plugins, for example the InAppBrowser webview, or opening links in the system web browser. It is only aplied to <strong>hyperlinks</strong> and calls to <code>window.open()</code>.</p>
+
+<p>Note: <code>allow-navigation</code> takes precedence over <code>allow-intent</code>. Allowing navigation to all URLs with <code><allow-navigation href="*" /></code> for example has the side effect of "capturing" all intents, so the webview navigates to them instead of triggering e.g. external apps.</p>
+
+<h2>Content Security Policy (CSP)</h2>
+
+<p>Controls which network requests (images, XHRs, etc) are allowed to be made (via webview directly).</p>
+
+<p>On Android and iOS, the network request allow list (see above) is not able to filter all types of requests (e.g. <code><video></code> & WebSockets are not blocked). So, in addition to the allow list, you should use a <a href="http://content-security-policy.com/">Content Security Policy</a> <code><meta></code> tag on all of your pages.</p>
+
+<p>Here are some example CSP declarations for your <code>.html</code> pages:</p>
+<div class="highlight"><pre><code class="language-html" data-lang="html"><span class="c"><!-- Good default declaration:
+ * gap: is required only on iOS (when using UIWebView) and is needed for JS->native communication
+ * https://ssl.gstatic.com is required only on Android and is needed for TalkBack to function properly
+ * Disables use of eval() and inline scripts in order to mitigate risk of XSS vulnerabilities. To change this:
+ * Enable inline JS: add 'unsafe-inline' to default-src
+ * Enable eval(): add 'unsafe-eval' to default-src
+--></span>
+<span class="nt"><meta</span> <span class="na">http-equiv=</span><span class="s">"Content-Security-Policy"</span> <span class="na">content=</span><span class="s">"default-src 'self' data: gap: https://ssl.gstatic.com; style-src 'self' 'unsafe-inline'; media-src *"</span><span class="nt">></span>
+
+<span class="c"><!-- Allow everything but only from the same origin and foo.com --></span>
+<span class="nt"><meta</span> <span class="na">http-equiv=</span><span class="s">"Content-Security-Policy"</span> <span class="na">content=</span><span class="s">"default-src 'self' foo.com"</span><span class="nt">></span>
+
+<span class="c"><!-- This policy allows everything (eg CSS, AJAX, object, frame, media, etc) except that
+ * CSS only from the same origin and inline styles,
+ * scripts only from the same origin and inline styles, and eval()
+--></span>
+<span class="nt"><meta</span> <span class="na">http-equiv=</span><span class="s">"Content-Security-Policy"</span> <span class="na">content=</span><span class="s">"default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'"</span><span class="nt">></span>
+
+<span class="c"><!-- Allows XHRs only over HTTPS on the same domain. --></span>
+<span class="nt"><meta</span> <span class="na">http-equiv=</span><span class="s">"Content-Security-Policy"</span> <span class="na">content=</span><span class="s">"default-src 'self' https:"</span><span class="nt">></span>
+
+<span class="c"><!-- Allow iframe to https://cordova.apache.org/ --></span>
+<span class="nt"><meta</span> <span class="na">http-equiv=</span><span class="s">"Content-Security-Policy"</span> <span class="na">content=</span><span class="s">"default-src 'self'; frame-src 'self' https://cordova.apache.org"</span><span class="nt">></span>
+</code></pre></div>
+<h2>Other Notes</h2>
+
+<p><a href="https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33">Application Transport Security (ATS)</a> is new in iOS 9 (Xcode 7). This new feature acts as an allow list for your app. Cordova CLI will automatically convert the <code><access></code> and <code><allow-navigation></code> tags to the appropriate ATS directives.</p>
+
+<p>The <code><access></code> and <code><allow-navigation></code> tags support these three attributes below, which have their equivalents in ATS:</p>
+
+<ol>
+<li><code>minimum-tls-version</code> (String, defaults to 'TLSv1.2')</li>
+<li><code>requires-forward-secrecy</code> (Boolean, defaults to 'true')</li>
+<li><code>requires-certificate-transparency</code> (Boolean, defaults to 'false', new in iOS 10)</li>
+</ol>
+
+<p><strong>Example:</strong></p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span class="nt"><access</span> <span class="na">origin=</span><span class="s">'https://cordova.apache.org'</span> <span class="na">minimum-tls-version=</span><span class="s">'TLSv1.1'</span> <span class="na">requires-forward-secrecy=</span><span class="s">'false'</span> <span class="na">requires-certificate-transparency=</span><span class="s">'true'</span> <span class="nt">/></span>
+</code></pre></div>
+<p>In iOS 10 and above, the <code><access></code> tag also supports these three attributes, described below, when paired with the origin wildcard <code>*</code>. These attributes also have their equivalents in ATS:</p>
+
+<ol>
+<li><code>allows-arbitrary-loads-for-media</code> (Boolean, defaults to 'false', new in iOS 10. New in cordova-ios@4.5.0, fixed to use the proper attribute name). The old attribute <code>allows-arbitrary-loads-in-media</code> is now deprecated.</li>
+<li><code>allows-arbitrary-loads-in-web-content</code> (Boolean, defaults to 'false', new in iOS 10)</li>
+<li><code>allows-local-networking</code> (Boolean, defaults to 'false', new in iOS 10)</li>
+</ol>
+
+<p><strong>Example:</strong></p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span class="nt"><access</span> <span class="na">origin=</span><span class="s">'*'</span> <span class="na">allows-arbitrary-loads-for-media=</span><span class="s">'true'</span> <span class="na">allows-arbitrary-loads-in-web-content=</span><span class="s">'true'</span> <span class="na">allows-local-networking=</span><span class="s">'true'</span> <span class="nt">/></span>
+</code></pre></div>
+<p>See the <a href="https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33">ATS Technote</a> for more details.</p>
+
+
+ </div>
+ </div>
+ <div class="row">
+ <div class="blue-divider"></div>
+<footer>
+ <div class="container-fluid">
+ <div class="row">
+ <div class="col-sm-9">
+ <h1>More Resources</h1>
+ <div class="row">
+ <div class="col-sm-4">
+ <h2>General</h2>
+ <ul class="nav">
+ <li>
+ <a target="_blank" href="https://projects.apache.org/project.html?cordova">Apache Project Page</a>
+ </li>
+ <li>
+ <a href="http://www.apache.org/dyn/closer.cgi/cordova">Source Distribution</a>
+ </li>
+ <li>
+ <a target="_blank" href="http://www.apache.org/licenses/LICENSE-2.0">License</a>
+ </li>
+ <li>
+ <a href="/artwork">Artwork</a>
+ </li>
+ </ul>
+ </div>
+ <div class="col-sm-4">
+ <h2>Development</h2>
+ <ul class="nav">
+ <li><a target="_blank" href="https://github.com/apache?utf8=%E2%9C%93&q=cordova-">Source Code</a></li>
+ <li><a target="_blank" href="https://issues.apache.org/jira/browse/CB/">Issue Tracker</a></li>
+ <li><a target="_blank" href="http://stackoverflow.com/questions/tagged/cordova">Stack Overflow</a></li>
+ <li><a href="/contact">Mailing List</a></li>
+ <li><a href="/contribute/nightly_builds.html">Nightly builds</a></li>
+ </ul>
+ </div>
+ <div class="col-sm-4">
+ <h2>Apache Software Foundation</h2>
+ <ul class="nav">
+ <li>
+ <a target="_blank" href="http://www.apache.org/">About ASF</a>
+ </li>
+ <li>
+ <a target="_blank" href="http://www.apache.org/foundation/sponsorship.html">Become a Sponsor</a>
+ </li>
+ <li>
+ <a target="_blank" href="http://www.apache.org/foundation/thanks.html">Thanks</a>
+ </li>
+ <li>
+ <a target="_blank" href="http://www.apache.org/security/">Security</a>
+ </li>
+ </ul>
+ </div>
+ </div>
+ </div>
+ <div class="col-sm-3">
+ <h1>Contribute</h1>
+ <p style="padding-top:20px"><strong>Help Cordova move forward!</strong></p>
+ <p>Report bugs, improve the docs, or contribute to the code.</p>
+ <a href="/contribute" class="btn btn-lg btn-primary">
+ Learn More
+ </a>
+ <p style="padding-top:20px"> <a href="https://twitter.com/apachecordova" class="twitter-follow-button" data-show-count="false">Follow @apachecordova</a></p>
+ <script async defer src="https://slack-cordova-io.herokuapp.com/slackin.js"></script>
+ </div>
+</div>
+<p class="copyright_text">
+ Copyright © 2012, 2013, 2015 The Apache Software Foundation, Licensed under the <a target="_blank" href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.<br/>
+ Apache and the Apache feather logos are <a target="_blank" href="http://www.apache.org/foundation/marks/list/">trademarks</a> of The Apache Software Foundation.
+ <br/>
+ "Raleway" font used under license. For details see the <a href="/attributions/">attributions page</a>.
+</p>
+
+ </div>
+</footer>
+
+ </div>
+ </div>
+</div>
+
+<script defer type="text/javascript" src="/static/js/lib/toc.min.js"></script>
+<script defer type="text/javascript" src="/static/js/docs.js"></script>
+
+ <script defer type="text/javascript" src="/static/js/index.js"></script>
+ <script defer type="text/javascript" src="/static/js/twitter.js"></script>
+
+
+
+
+
+
+
+
+<script type="text/javascript" src="https://cdn.jsdelivr.net/docsearch.js/1/docsearch.min.js"></script>
+<script type="text/javascript">
+ docsearch({
+ apiKey: '0a916ab198bd93d031aa70611271e42e',
+ indexName: 'cordova',
+ inputSelector: '#header-search-field',
+ algoliaOptions: { 'facetFilters': ["version: dev", "language: en"] }
+ });
+</script>
+
+</body>
+</html>
Modified: cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html
URL: http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html Wed Dec 2 09:23:53 2020
@@ -418,8 +418,8 @@
<li>
- <a class="" href="../../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
@@ -912,21 +912,6 @@
</li>
-
- <li>
-
- <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-
-
-
-
-
-
-
- </li>
-
</ul>
@@ -1106,8 +1091,8 @@
<li>
- <a class="" href="../../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
</li>
@@ -1372,15 +1357,6 @@
</a>
</li>
-
-
-
-<li>
- <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-</li>
-
Modified: cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html
URL: http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html Wed Dec 2 09:23:53 2020
@@ -420,8 +420,8 @@
<li>
- <a class="" href="../../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
@@ -912,21 +912,6 @@
</li>
-
- <li>
-
- <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-
-
-
-
-
-
-
- </li>
-
</ul>
@@ -1106,8 +1091,8 @@
<li>
- <a class="" href="../../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
</li>
@@ -1372,15 +1357,6 @@
</a>
</li>
-
-
-
-<li>
- <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-</li>
-
Modified: cordova/site/public/docs/en/dev/guide/appdev/security/index.html
URL: http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/security/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/security/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/appdev/security/index.html Wed Dec 2 09:23:53 2020
@@ -420,8 +420,8 @@
<li>
- <a class="" href="../../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
@@ -912,21 +912,6 @@
</li>
-
- <li>
-
- <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-
-
-
-
-
-
-
- </li>
-
</ul>
@@ -1106,8 +1091,8 @@
<li>
- <a class="" href="../../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
</li>
@@ -1375,15 +1360,6 @@
-<li>
- <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-</li>
-
-
-
-
@@ -2547,7 +2523,7 @@
<h2>This guide discusses the following topics:</h2>
<ul>
-<li>Whitelist</li>
+<li>Allow List</li>
<li>Iframes and the Callback Id Mechanism</li>
<li>Certificate Pinning</li>
<li>Self-signed Certificates</li>
@@ -2556,12 +2532,9 @@
<li>Recommended Articles and Other Resources</li>
</ul>
-<h2>Whitelist</h2>
+<h2>Allow List</h2>
-<ul>
-<li><p>Read and understand the <a href="../whitelist/index.html">Whitelist Guide</a></p></li>
-<li><p>Domain whitelisting does not work on Android API 10 and below, and WP8 for iframes and XMLHttpRequest. This means an attacker can load any domain in an iframe and any script on that page within the iframe can directly access Cordova JavaScript objects and the corresponding native Java objects. You should take this into consideration when building applications for these platforms. In practice this means making sure you target an Android API higher than 10, and that if possible you do not use an iframe to load external content - use the inAppBrowser plugin or other third-party plugins.</p></li>
-</ul>
+<p>By default the app's navigation is unrestricted. It's recommended to restrict the navigation only to trusted domains. Learn more by reading the <a href="../allowlist/index.html">Allow List Guide</a></p>
<h2>Iframes and the Callback Id Mechanism</h2>
Modified: cordova/site/public/docs/en/dev/guide/cli/index.html
URL: http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/cli/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/cli/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/cli/index.html Wed Dec 2 09:23:53 2020
@@ -420,8 +420,8 @@
<li>
- <a class="" href="../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
@@ -912,21 +912,6 @@
</li>
-
- <li>
-
- <a class="" href="../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-
-
-
-
-
-
-
- </li>
-
</ul>
@@ -1106,8 +1091,8 @@
<li>
- <a class="" href="../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
</li>
@@ -1372,15 +1357,6 @@
</a>
</li>
-
-
-
-<li>
- <a class="" href="../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-</li>
-
Modified: cordova/site/public/docs/en/dev/guide/cli/template.html
URL: http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/cli/template.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/cli/template.html (original)
+++ cordova/site/public/docs/en/dev/guide/cli/template.html Wed Dec 2 09:23:53 2020
@@ -420,8 +420,8 @@
<li>
- <a class="" href="../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
@@ -912,21 +912,6 @@
</li>
-
- <li>
-
- <a class="" href="../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-
-
-
-
-
-
-
- </li>
-
</ul>
@@ -1106,8 +1091,8 @@
<li>
- <a class="" href="../../guide/appdev/whitelist/index.html">
- Whitelisting
+ <a class="" href="../../guide/appdev/allowlist/index.html">
+ Allow List
</a>
</li>
@@ -1372,15 +1357,6 @@
</a>
</li>
-
-
-
-<li>
- <a class="" href="../../reference/cordova-plugin-whitelist/index.html">
- Whitelist
- </a>
-</li>
-
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org