Return-Path: <issues-return-72652-archive-asf-public=cust-asf.ponee.io@cordova.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id 7671D200B84
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Tue, 20 Sep 2016 17:51:22 +0200 (CEST)
Received: by cust-asf.ponee.io (Postfix)
	id 751C2160AC0; Tue, 20 Sep 2016 15:51:22 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id B7BAB160AC5
	for <archive-asf-public@cust-asf.ponee.io>; Tue, 20 Sep 2016 17:51:21 +0200 (CEST)
Received: (qmail 54040 invoked by uid 500); 20 Sep 2016 15:51:21 -0000
Mailing-List: contact issues-help@cordova.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cordova.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cordova.apache.org>
List-Post: <mailto:issues@cordova.apache.org>
List-Id: <issues.cordova.apache.org>
Delivered-To: mailing list issues@cordova.apache.org
Received: (qmail 53776 invoked by uid 99); 20 Sep 2016 15:51:20 -0000
Received: from arcas.apache.org (HELO arcas) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 20 Sep 2016 15:51:20 +0000
Received: from arcas.apache.org (localhost [127.0.0.1])
	by arcas (Postfix) with ESMTP id 95A472C2A66
	for <issues@cordova.apache.org>; Tue, 20 Sep 2016 15:51:20 +0000 (UTC)
Date: Tue, 20 Sep 2016 15:51:20 +0000 (UTC)
From: "jcesarmobile (JIRA)" <jira@apache.org>
To: issues@cordova.apache.org
Message-ID: <JIRA.12979242.1465966042000.616894.1474386680609@Atlassian.JIRA>
In-Reply-To: <JIRA.12979242.1465966042000@Atlassian.JIRA>
References: <JIRA.12979242.1465966042000@Atlassian.JIRA> <JIRA.12979242.1465966042715@arcas>
Subject: [jira] [Commented] (CB-11440) iOS: Remove default: disabled
 NSAppTransportSecurity - soon required by Apple
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
archived-at: Tue, 20 Sep 2016 15:51:22 -0000


    [ https://issues.apache.org/jira/browse/CB-11440?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15506937#comment-15506937 ] 

jcesarmobile commented on CB-11440:
-----------------------------------

NSAllowsArbitraryLoads is added because the default template has the <access origin="*" /> on the config.xml

So, the solution for this issue is to remove the <access origin="*" /> from the template? and maybe document that Apple will reject your app if you use the <access origin="*" />?

> iOS: Remove default: disabled NSAppTransportSecurity - soon required by Apple 
> ------------------------------------------------------------------------------
>
>                 Key: CB-11440
>                 URL: https://issues.apache.org/jira/browse/CB-11440
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: iOS
>         Environment: cordova-ios 4.1.1
>            Reporter: Michael Schmidt
>            Assignee: Shazron Abdullah
>            Priority: Blocker
>              Labels: iOS, triaged
>
> iOS platform by default disables https:
> {code}
>     <key>NSAppTransportSecurity</key>
>     <dict>
>       <key>NSAllowsArbitraryLoads</key>
>       <true/>
>     </dict>
> {code}
> Apple soon requires HTTPS:
> "Apple mandates App Store apps support ATS security protocol by 2017"
> http://appleinsider.com/articles/16/06/14/apple-mandates-app-store-apps-support-ats-security-protocol-by-2017
> --> remove this default from cordova ios platform



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org