cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Shazron <shaz...@gmail.com>
Subject Re: Whitelist defaults
Date Thu, 01 Nov 2012 23:58:53 GMT
I concur with Kevin. It won't be much of a whitelist if no one uses it -- I
would argue that if you set it to "*" by default, no dev will (usually)
change that, especially if they don't know there is a whitelist in the
first place.


On Thu, Nov 1, 2012 at 4:48 PM, Kevin Hawkins <
kevin.hawkins.cordova@gmail.com> wrote:

> From a security perspective, I'm partial to the iOS (nothing) default,
> recognizing of course that there are certain usability drawbacks to that
> approach.
>
> On Thu, Nov 1, 2012 at 4:34 PM, Filip Maj <fil@adobe.com> wrote:
>
> > Quick q: how come Android + BB's whitelists by default whitelist
> > everything (*), but iOS does the opposite (whitelist nothing)?
> >
> > I'd like to see this unified across all platforms we support.
> >
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message