[jira] [Commented] (CB-8026) Apps targeting LOLLIPOP or later default to disallowing third party cookies

["Joe Bowser (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CB-8026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14270441#comment-14270441 ] 

Joe Bowser commented on CB-8026:
--------------------------------

Wait, why are we turning on Third-Party cookies? I think this is actually a good default since this discourages harmful behaviour like using third-party ad networks in your application.  Can you please explain the use case and why we would want to have these cookies enabled?

> Apps targeting LOLLIPOP or later default to disallowing third party cookies
> ---------------------------------------------------------------------------
>
>                 Key: CB-8026
>                 URL: https://issues.apache.org/jira/browse/CB-8026
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Android
>    Affects Versions: 4.0.0
>            Reporter: jan
>            Assignee: Joe Bowser
>            Priority: Blocker
>             Fix For: 3.7.0, 4.0.0
>
>
> Apps that target KITKAT or below default to allowing third party cookies. Apps targeting LOLLIPOP or later default to disallowing third party cookies.
> https://developer.android.com/reference/android/webkit/CookieManager.html
> Android 5.0 changes the default behavior for your app.
> If your app targets API level 21 or higher:
> The system blocks mixed content and third party cookies by default. To allow mixed content and third party cookies, use the setMixedContentMode() and setAcceptThirdPartyCookies() methods respectively.
> The system now intelligently chooses portions of the HTML document to draw. This new default behavior helps to reduce memory footprint and increase performance. If you want to render the whole document at once, disable this optimization by calling enableSlowWholeDocumentDraw().
> If your app targets API levels lower than 21: The system allows mixed content and third party cookies, and always renders the whole document at once.
> https://developer.android.com/about/versions/android-5.0-changes.html#BehaviorWebView
> Workaround in the "Comments" section...



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org