cordova-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joe Bowser (JIRA)" <>
Subject [jira] [Commented] (CB-2099) Android whitelisting only blocks documents, not resources
Date Wed, 19 Jun 2013 23:08:20 GMT


Joe Bowser commented on CB-2099:

[~vergnes] I don't have any advice to solve your problem unfortunately.  We don't have anything
saying that images are OK but JS resources are not right now, and also this will be a problem
pretty much across all the platforms because this is how all the platforms are supposed to
work.  (If they don't, it's a bug, so please let us know.)  What I can advise is that you
propose a more granular whitelist where only certain mime types are OK from certain URIs,
or argue to do away with the whitelist altogether, since there are many people who think it

But yeah, there's no quick wins here, and I wish there were.
> Android whitelisting only blocks documents, not resources
> ---------------------------------------------------------
>                 Key: CB-2099
>                 URL:
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Android
>    Affects Versions: 2.2.0
>            Reporter: manjula fernando
>            Assignee: Joe Bowser
> The Domain Whitelisting in Android works only for the href links, but not for the embedded
resources (images, javascripts). If link is not whitelisted it gets opened in a new instance
of native browser rather than blocking it completely. But in iOS it blocks all non-whitelisted
domains. Please let me know whether this is the expected behavior in whitelisting for Android?.
If so, has this been identified as a known issue and planning to be fixed in future release?
Appreciate your early response on this.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:

View raw message