You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by GitBox <gi...@apache.org> on 2019/08/19 12:11:03 UTC
[GitHub] [cordova-android] HighSoftWare96 opened a new issue #812: Allowed
unsecured hosts list.
HighSoftWare96 opened a new issue #812: Allowed unsecured hosts list.
URL: https://github.com/apache/cordova-android/issues/812
# Feature Request
## Motivation Behind Feature
<!-- Why should this feature be implemented? What problem does it solve? -->
We should be able to add a list of unsecure network hosts in order to allow unsecured network requests for there hosts. Right now in android Ionic allows to send requests to unsecured or self-certified hosts only in debug mode and not in release mode.
## Feature Description
<!--
Describe your feature request in detail
Please provide any code examples or screenshots of what this feature would look like
Are there any drawbacks? Will this break anything for existing users?
-->
In this file we should access to this list (configured somewhere, maybe in the manifest.xml file) before calling the `super.onReceivedSslError(view, handler, error);` so the developers can define which hosts can be used without SSL trust.
https://github.com/apache/cordova-android/blob/bd1697dbd27411d8b12d9ad0902babaaae327efa/framework/src/org/apache/cordova/engine/SystemWebViewClient.java#L225
## Alternatives or Workarounds
<!--
Describe alternatives or workarounds you are currently using
Are there ways to do this with existing functionality?
-->
Right now the only workaround is to change the actual Java code to call the next handler instead of the `super.onReceivedSslError(view, handler, error);` in any cases, as it is explained here: http://ivancevich.me/articles/ignoring-invalid-ssl-certificates-on-cordova-android-ios/.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org