Return-Path: 
 <issues-return-1405-apmail-cordova-issues-archive=cordova.apache.org@cordova.apache.org>
X-Original-To: apmail-cordova-issues-archive@minotaur.apache.org
Delivered-To: apmail-cordova-issues-archive@minotaur.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 14670D3CD
	for <apmail-cordova-issues-archive@minotaur.apache.org>;
 Wed, 13 Mar 2013 02:08:13 +0000 (UTC)
Received: (qmail 90302 invoked by uid 500); 13 Mar 2013 02:08:13 -0000
Delivered-To: apmail-cordova-issues-archive@cordova.apache.org
Received: (qmail 90268 invoked by uid 500); 13 Mar 2013 02:08:13 -0000
Mailing-List: contact issues-help@cordova.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cordova.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cordova.apache.org>
List-Post: <mailto:issues@cordova.apache.org>
List-Id: <issues.cordova.apache.org>
Reply-To: dev@cordova.apache.org
Delivered-To: mailing list issues@cordova.apache.org
Received: (qmail 90258 invoked by uid 99); 13 Mar 2013 02:08:12 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 13 Mar 2013 02:08:12 +0000
Date: Wed, 13 Mar 2013 02:08:12 +0000 (UTC)
From: "James Jong (JIRA)" <jira@apache.org>
To: issues@cordova.apache.org
Message-ID: <JIRA.12632649.1360960399793.430303.1363140492920@arcas>
In-Reply-To: <JIRA.12632649.1360960399793@arcas>
References: <JIRA.12632649.1360960399793@arcas>
Subject: [jira] [Assigned] (CB-2451) HTML5 audio/video tags bypass the
 whitelist
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/CB-2451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

James Jong reassigned CB-2451:
------------------------------

    Assignee: James Jong  (was: Shazron Abdullah)
    
> HTML5 audio/video tags bypass the whitelist
> -------------------------------------------
>
>                 Key: CB-2451
>                 URL: https://issues.apache.org/jira/browse/CB-2451
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: iOS
>    Affects Versions: 2.3.0, 2.4.0
>            Reporter: Shazron Abdullah
>            Assignee: James Jong
>             Fix For: 2.6.0
>
>
> Looks like audio/video tags do bypass the whitelist due to our recent changes. This line returns nil when it shouldn't:
> https://github.com/apache/cordova-ios/blob/e8a740176a465092b0d55dc9aee9a3e0ac314691/CordovaLib/Classes/CDVURLProtocol.m#L107
> Tested using: 
> {code}
>         <audio controls="controls">
>             <source src="http://cordova.apache.org/downloads/BlueZedEx.mp3" />
>         </audio>
> {code}
> and in config.xml:
> {code}
>         <access origin="http://google.com" />
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira