Mailing-List: contact dev-help@cordova.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cordova.apache.org
Date: Wed, 26 Aug 2015 14:59:44 +0000 (UTC)
From: Kerri Shotts <kerrishotts@gmail.com>
To: dev@cordova.apache.org
Message-ID: 
 <4C5A9BED1F66B9D1.9A0A16FB-49DF-40DB-9FCA-4C0932DBC1B5@mail.outlook.com>
In-Reply-To: 
 <CAE6O_-aAaLMs-H26SLZ3mcxAM8NL-derPCwDAdX5emvPq3Uxyw@mail.gmail.com>
References: 
 <CAE6O_-YO4C4Bu63axa0qkq6oA7PbdtxJODDYrkaxV=6KgsG3Lw@mail.gmail.com>
 <85A3E123BABF314D9D3656D0B418125644952E44@FMSMSX103.amr.corp.intel.com>
 <CAE6O_-axs-vfp8W2U92VZm5OZaw2pxRymGNEcWzzQ+P_M5DhOw@mail.gmail.com>
 <85A3E123BABF314D9D3656D0B418125644952E8B@FMSMSX103.amr.corp.intel.com>
 <CAE6O_-YvoTUvijxFMC8bVPoNsi2LMjcQcTXfMTwCJ7OxAFZqog@mail.gmail.com>
 <CAK_TSXKBX-cxj4X1fmcU9nyekcThC5RcQhFs6GA1Ld+y=xGfCg@mail.gmail.com>
 <CAHYtTq=cBYNpSB3v9ZGPpFjniSJi5RjmCOYRKm-nn-t26wcgwQ@mail.gmail.com>
 <85A3E123BABF314D9D3656D0B4181256449BD187@FMSMSX102.amr.corp.intel.com>
 <CAE6O_-Zzy-+iGG9D2SPkSyc-e6WChnPL37WP_M8r3_aeZq9yrg@mail.gmail.com>
 <CAE6O_-aAaLMs-H26SLZ3mcxAM8NL-derPCwDAdX5emvPq3Uxyw@mail.gmail.com>
Subject: Re: [iOS] proposed major whitelist change
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_3077_1813486844.1440601184005"

------=_Part_3077_1813486844.1440601184005
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

+1; sounds like a good change to me! :)

Kerri Shotts , photoKandy Studios LLC

http://www.photokandy.com/ =E2=80=A2 @photokandy=20

=E2=86=92 CONFIDENTIAL =E2=86=90=20

This email and any attachments may be confidential. If you are not the inte=
nded recipient, please let us know by replying to this message, and then re=
move the message and its attachments from your system. You should not disse=
minate, distribute, or otherwise copy or release the information contained =
herein, nor can we accept any liability for any loss or damages resulting f=
rom the use, abuse, or mis-use of the information contained herein.

=E2=86=92 SECURITY =E2=86=90

Computer viruses can be distributed via email. It is the recipient=E2=80=99=
s responsibility to check this email and any attachments for viruses. Email=
 transmission cannot be guaranteed to be secure or error-free as the email =
could have been intercepted, corrupted, delayed, and/or re-transmitted. The=
 sender does not accept any liability for errors or omissions within this m=
essage or its attachments, nor for any viruses which may be present.

Note: We do our very best to ensure that nothing we send contains viruses. =
However, because of the nature of email and the way it is sent, we can=E2=
=80=99t promise that some other party hasn=E2=80=99t intercepted our email =
and added malicious content. Due to the nature of email, we can=E2=80=99t a=
ccept any liability for any damage or loss arising from the use, abuse, or =
mis-use of this email and any of its attachments.

=E2=86=92 PRIVACY =E2=86=90=20

Email is not a secure communications medium. When replying to this or any m=
essage, you should not include any information that you do not want the ent=
ire world to be capable of seeing. In other words, don=E2=80=99t send finan=
cial accounts (CC#s, Bank Account #s, etc.), passwords, social security num=
bers, or the like, even when asked directly. photoKandy Studios LLC will ne=
ver  ask you for this information.

Information transmitted via email may be intercepted and retransmitted by a=
ny number of other entities. This is the nature of email, and as such, we c=
an=E2=80=99t be held liable for any loss or damage incurred by replying to =
this message with compromising information. Review your message prior to se=
nding it, and ensure that there is no information you wouldn=E2=80=99t be c=
omfortable with the entire world knowing.


On Wed, Aug 26, 2015 at 6:14 AM -0700, "Shazron" <shazron@gmail.com> wrote:


Any objections or further feedback? If not I will move on to what we seem
to have consensus about:

If there are no  entries, then network requests are wide open
(wildcard * default) and security is handled via CSP.
We would recommend no  entries to be used, users should use CSP.

On Tue, Aug 11, 2015 at 7:01 PM, Shazron  wrote:

>
> So, is the whitelist plugin network request list "*" with no=20
>> entries, or
>> "*" because of the  entry added to the default project?
>
>
> "*" would be the default. So if there are no  entries, it would be
> added. If the default project had the  wildcard, then no change
> (since that is the default anyway).
>
> The old way you would need an explicit  entry wildcard for
> unrestricted native and web code access -- the new way is unrestricted
> native code access (unless set explicitly), and CSP for web code access.
>
------=_Part_3077_1813486844.1440601184005--