You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "Joe Bowser (JIRA)" <ji...@apache.org> on 2013/06/20 01:08:20 UTC
[jira] [Commented] (CB-2099) Android whitelisting only blocks
documents, not resources
[ https://issues.apache.org/jira/browse/CB-2099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13688601#comment-13688601 ]
Joe Bowser commented on CB-2099:
--------------------------------
[~vergnes] I don't have any advice to solve your problem unfortunately. We don't have anything saying that images are OK but JS resources are not right now, and also this will be a problem pretty much across all the platforms because this is how all the platforms are supposed to work. (If they don't, it's a bug, so please let us know.) What I can advise is that you propose a more granular whitelist where only certain mime types are OK from certain URIs, or argue to do away with the whitelist altogether, since there are many people who think it sucks.
But yeah, there's no quick wins here, and I wish there were.
> Android whitelisting only blocks documents, not resources
> ---------------------------------------------------------
>
> Key: CB-2099
> URL: https://issues.apache.org/jira/browse/CB-2099
> Project: Apache Cordova
> Issue Type: Bug
> Components: Android
> Affects Versions: 2.2.0
> Reporter: manjula fernando
> Assignee: Joe Bowser
>
> The Domain Whitelisting in Android works only for the href links, but not for the embedded resources (images, javascripts). If link is not whitelisted it gets opened in a new instance of native browser rather than blocking it completely. But in iOS it blocks all non-whitelisted domains. Please let me know whether this is the expected behavior in whitelisting for Android?. If so, has this been identified as a known issue and planning to be fixed in future release? Appreciate your early response on this.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira