cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jesse <purplecabb...@gmail.com>
Subject Re: CSP ignored when using remote content
Date Fri, 22 May 2015 00:27:59 GMT
This is the intended behavior.  The csp rules are defined by the page that
is loaded, wherever it is.
Pointing content.src to a remote server basically means, ignore anything
that is in www/index.html.

@purplecabbage
risingj.com

On Thu, May 21, 2015 at 2:16 PM, Pär <p.majholm@gmail.com> wrote:

> When using a remote content src like <content src="
> http://remoteserver.com/app/index.html"> the CSP rules seems to be
> ignored;
> cross origin requests fail even with a "default-src *" CSP. Is this
> intended behaviour or a bug?
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message