cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Shazron Abdullah (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-1889) White-list exception enhancements for plugins
Date Wed, 28 Nov 2012 00:52:58 GMT

    [ https://issues.apache.org/jira/browse/CB-1889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13505115#comment-13505115
] 

Shazron Abdullah commented on CB-1889:
--------------------------------------

We should re-work the whitelist use -- right now it appears each instance of CDVViewController
can have a separate whitelist (through its whitelist property), but the use of the global
whitelist (taken from the first registered CDVViewController) in CDVURLProtocol belies this.
                
> White-list exception enhancements for plugins
> ---------------------------------------------
>
>                 Key: CB-1889
>                 URL: https://issues.apache.org/jira/browse/CB-1889
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: iOS
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>             Fix For: 2.3.0
>
>
> See CB-1695
> 1. CDVViewController needs a UserAgent property that plugins can query, so they can set
their NSURLRequest User-Agent to the same UserAgent, so they can take advantage of the white-list.
Right now, any other network connection that is not part of the main Cordova UIWebView is
excepted from the white-list with the changes in CB-1695.
> 2. Have a way for plugins to query the whitelist before sending out requests
> 3. The UA in (1) should be cached after being discovered (since it requires a costly
UIWebView instantation the first time). Cache the iOS version as well, so that we invalidate
the UA if the iOS version changes. Also, hook into locale change notifications, if a locale
change happens, invalidate the cached UA value as well.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message