[jira] [Updated] (CB-9568) Update whitelist plugin to allow all network access by default

["Shazron Abdullah (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CB-9568?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shazron Abdullah updated CB-9568:
---------------------------------
    Component/s:     (was: iOS)
                 Plugin Whitelist

> Update whitelist plugin to allow all network access by default
> --------------------------------------------------------------
>
>                 Key: CB-9568
>                 URL: https://issues.apache.org/jira/browse/CB-9568
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Plugin Whitelist
>            Reporter: Shazron Abdullah
>              Labels: cordova-ios-4.0.x
>
> Basically the default for the access tag, if it's not present is the wildcard "*"
> It's as if this tag is there if not present:
> <access origin="*" />
> ML thread: http://markmail.org/message/j3kd4lug65jdiiba
> From Carlos:
> {code}
> But we need better docs to explain the differences between legacy-whitelist
> and whitelist
> And more detailed explanation on how to create a proper config.xml that
> works across the board for ios and android. What about windows?
> Also to look on how to have a good config.xml in hello-world template,
> since most users will start with this first and I would like to be secure
> by default and they open. meaning rely on CSP, and only use config.xml for
> x, y, z
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org