cordova-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF GitHub Bot (JIRA)" <>
Subject [jira] [Commented] (CB-12145) Since Android 5 third party cookies cannot be accepted by the browser due to default policy settings
Date Mon, 14 Nov 2016 20:29:00 GMT


ASF GitHub Bot commented on CB-12145:

GitHub user tmoxon opened a pull request:

     CB-12145: (android) Allow third party cookies if parameter set

    Affects: Android 5+
    Creates a new parameter for Android browser setup: acceptThirdPartyCookies. If set to
'yes' then, for Android 5 and above, the cookie manager policy to allow third party cookies
will be set.
    Note that this is not entirely original in concept - a [PR was already raised](
for this however I've expanded on this to make it optional which seems pragmatic given the
role of the in app browser.
    I have built and tested this against android 4.x and 6.x phones in both modes and confirmed

You can merge this pull request into a Git repository by running:

    $ git pull master

Alternatively you can review and apply these changes as the patch at:

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #198
commit e3b971673537f111782a22477f8e6fa2fb6ea54d
Author: Tim Moxon <>
Date:   2016-11-14T20:02:47Z

    Added third party cookie policy by acceptThirdPartyCookies parameter.

commit 81f35dc8bcbe9ffd94f05468953a4ff6b28bc37e
Author: Tim Moxon <>
Date:   2016-11-14T20:11:43Z

    Fixed spacing


> Since Android 5 third party cookies cannot be accepted by the browser due to default
policy settings
> ----------------------------------------------------------------------------------------------------
>                 Key: CB-12145
>                 URL:
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: Plugin InAppBrowser
>         Environment: Android 5+
>            Reporter: Tim Moxon
>            Priority: Minor
>              Labels: android, cookies, security
>   Original Estimate: 2h
>  Remaining Estimate: 2h
> Since Android Lollipop / version 5 the inappbrowser cannot accept third party cookies
due to changes to the default policy from the OS. The main cordova platform now accepts them
by default to handle various workflows in which they are necessitated, however the inappbrowser
hasn't yet followed suit.
> In my particular usage scenario this creates problems with an opened browser not being
able to pass through an oauth flow to another site in the background. 
> I have a fix for this which I will commit now in association with this ticket.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message