cordova-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From shaz...@apache.org
Subject [01/50] [abbrv] cordova-plugins git commit: update security caveat in README
Date Sat, 08 Nov 2014 02:31:29 GMT
Repository: cordova-plugins
Updated Branches:
  refs/heads/master 37b54f8e6 -> 57e7219eb


update security caveat in README


Project: http://git-wip-us.apache.org/repos/asf/cordova-plugins/repo
Commit: http://git-wip-us.apache.org/repos/asf/cordova-plugins/commit/83359224
Tree: http://git-wip-us.apache.org/repos/asf/cordova-plugins/tree/83359224
Diff: http://git-wip-us.apache.org/repos/asf/cordova-plugins/diff/83359224

Branch: refs/heads/master
Commit: 83359224c1fab99909761026e7f7272ca4abc0ce
Parents: 7fd6d2b
Author: Tony Homer <tony.homer@intel.com>
Authored: Mon Nov 3 20:47:41 2014 -0500
Committer: Tony Homer <tony.homer@intel.com>
Committed: Mon Nov 3 20:47:41 2014 -0500

----------------------------------------------------------------------
 README.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cordova-plugins/blob/83359224/README.md
----------------------------------------------------------------------
diff --git a/README.md b/README.md
index 288ca08..54e0888 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,9 @@ Check your console log for errors in configuration.
 
 ## Security Caveats
 
-    Any backgrounded app can potentially access this local web server when your app is running.
+    In order to limit access to your app, requests are restricted to localhost and are protected
with an auth token.
+    This should effectively restrict access to the server to your app.
+    However, since requests are made over http, your app's activity may be visible to others
on the name wi-fi network.
 
 This plugin is only compatible with the 3.7.0 release of cordova-ios, or greater.
     


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org


Mime
View raw message