[jira] [Commented] (CB-2342) Media API allows non-whitelisted audio to be played

["Shazron Abdullah (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CB-2342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13569058#comment-13569058 ] 

Shazron Abdullah commented on CB-2342:
--------------------------------------

As commented by Andrew Grieve, CDVSound.m does not set the User-Agent, thus all network connections from the plugin bypasses the whitelist. 

How to set the User-Agent header is documented here in "Upgrading to 2.3.0": https://github.com/apache/cordova-ios/blob/master/guides/Cordova%20Plugin%20Upgrade%20Guide.md 
                
> Media API allows non-whitelisted audio to be played
> ---------------------------------------------------
>
>                 Key: CB-2342
>                 URL: https://issues.apache.org/jira/browse/CB-2342
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: iOS
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>             Fix For: 2.5.0
>
>
> Repro steps:
> 1. Locate an audio file that can be played from a network location
> 2. Make sure that the location of the file from (1) is not in the whitelist config.xml
> 3. Play the audio file using the Media API
> Expected:
> Media file does not play, it is rejected by the whitelist.
> Actual:
> Media file plays, it is not rejected by the whitelist.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira