cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joe Bowser (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-2269) Whitelisting is broken on Android following creation of Config class
Date Mon, 21 Jan 2013 18:26:12 GMT

    [ https://issues.apache.org/jira/browse/CB-2269?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13558959#comment-13558959
] 

Joe Bowser commented on CB-2269:
--------------------------------

It appears that redirects work if you include all the redirected URIs.  For example, Google
will only appear in Cordova if you do the following:

<access origin="http://google.ca" subdomains="true" />
<access origin="http://google.com" subdomains="true" />


                
> Whitelisting is broken on Android following creation of Config class
> --------------------------------------------------------------------
>
>                 Key: CB-2269
>                 URL: https://issues.apache.org/jira/browse/CB-2269
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Android
>    Affects Versions: 2.4.0
>            Reporter: Joe Bowser
>            Assignee: Braden Shepherdson
>            Priority: Blocker
>             Fix For: 2.4.0
>
>
> The whitelist doesn't appear to be created, and as such everything is blacklisted instead
because the config associated with the static method is null.  We need to call init() on the
Config somewhere in our code, most likely DroidGap.java, since most of our users when upgrading
will just drop in the JAR, and will not modify their Java code.
> Also, even when the Config.init() method is called, the whitelisting still fails.  Currently
only the whitelisting lives in the class, and luckily there is separate code for the loading
of the plugins.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message