You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2015/01/08 21:14:35 UTC

[jira] [Commented] (CB-8252) Prep core plugins for CSP by removing eval()s (Android only)

    [ https://issues.apache.org/jira/browse/CB-8252?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14269979#comment-14269979 ] 

ASF GitHub Bot commented on CB-8252:
------------------------------------

GitHub user jpchase opened a pull request:

    https://github.com/apache/cordova-plugin-media/pull/41

    CB-8252 Fire audio events from native via message channel

    - Add startup logic to initialize a message channel for native -> Javascript
    - Applies only to android and amazon-fireos (as this reuses the android native code)
    - Change audio status events to send via plugin message channel, instead
    using eval() (i.e. webView.sendJavascript())

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/jpchase/cordova-plugin-media CB-8252

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/cordova-plugin-media/pull/41.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #41
    
----
commit c3880f377f3c7737f3d3282701c8e0e6f8109c68
Author: Jason Chase <ja...@gmail.com>
Date:   2015-01-08T20:04:51Z

    CB-8252 Fire audio events from native via message channel
    - Add startup logic to initialize a message channel for native -> Javascript
    - Applies only to android and amazon-fireos (as this reuses the android native code)
    - Change audio status events to send via plugin message channel, instead
    using eval() (i.e. webView.sendJavascript())

----


> Prep core plugins for CSP by removing eval()s (Android only)
> ------------------------------------------------------------
>
>                 Key: CB-8252
>                 URL: https://issues.apache.org/jira/browse/CB-8252
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: Plugins
>    Affects Versions: Master
>            Reporter: Jason Chase
>            Assignee: Jason Chase
>
> In preparation for CSP, remove any native Android code in the core plugins that is using inline javascript/eval()s.
> Other platforms with native code (i.e. iOS) are out of scope for now.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org