Mailing-List: contact callback-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: callback-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of bowserj@gmail.com designates
 209.85.212.171 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAM1AYQArv9z_LnKbnGoywaxMvUY4PeeJdfw-NFwhhmAxG0CYpg@mail.gmail.com>
References: 
 <CAOBL_k6VDaDwtU=m0od_baA4ZgSuT-Ei0_AZrF_FGsf=bOs==w@mail.gmail.com>
	<CBCD841C.5B3F%fil@adobe.com>
	<CACAoQH0obfr9AnkUCSXHH8acEVT2U4gGqLUY-89kUYRdoz1sGg@mail.gmail.com>
	<CAOBL_k5Sg-roaxeOcdno1wMOOAjscTppvdWbjKbHo_WBtMGC+g@mail.gmail.com>
	<CAM1AYQArv9z_LnKbnGoywaxMvUY4PeeJdfw-NFwhhmAxG0CYpg@mail.gmail.com>
Date: Mon, 7 May 2012 21:52:08 -0700
Message-ID: 
 <CAOBL_k4kUKANEQduTq-+KKRxs7e9tvBMbxmsXkjdYHq2Fu9ZwA@mail.gmail.com>
Subject: Re: Default Enable Plugins
From: Joe Bowser <bowserj@gmail.com>
To: callback-dev@incubator.apache.org
Content-Type: multipart/alternative; boundary=0016e6d7848a1e4e4e04bf7f26d7

--0016e6d7848a1e4e4e04bf7f26d7
Content-Type: text/plain; charset=ISO-8859-1

After reading Simon's response, and thinking about this a bit more, I'm
going to have to agree with him.  I think that it would be trivial for this
to be added to PhoneGap Build without us adding this method to Cordova.

There's also the fact that this method is deprecated in Android in favour
of WebSettings.setPluginState.

The fact is that I have no idea what plugins the phone has, how they access
memory and whether that adds additional risks to a PhoneGap or Cordova
application. The Flash Player, for example, could store all the data
centrally on the phone, and that data might be able to be accessed in the
browser by another app that has nothing to do with the original app (I hope
that this wouldn't happen, but I haven't met anyone from the Flash team yet
who knows about this).  Given the fact that plugins are shared across every
WebView on the device, there's no way that I'd be for enabling this by
default, since one of our users could upgrade Cordova and end up with a
nasty surprise because a phone manufacturer added a special plugin that was
insecure as a "feature".

If you don't believe me, you should spend more time reading logcat on your
phone.  You'll be surprised the messed up crap that is logged there.

Joe

On Mon, May 7, 2012 at 7:56 PM, Simon MacDonald
<simon.macdonald@gmail.com>wrote:

> Jumping in here at the end to offer my two cents. Personally I don't think
> the plugins should be enabled by default in our web view. Android devs can
> easily add a line in their onCreate method to enable plugins. The only
> folks this is a problem for are users of the PhoneGap Build service. To me
> that is outside the scope of the Apache Cordova project. So if is going to
> be handled anywhere it should be in the config.xml of the build service.
>
> Simon
>
> On Monday, May 7, 2012, Joe Bowser wrote:
>
> > I think that platform-specific things should use the preferences tag, and
> > that they should be ignored if they're not supported.  That should make
> > things easy.
> >
> > On Mon, May 7, 2012 at 2:17 PM, Patrick Mueller <pmuellr@gmail.com
> <javascript:;>>
> > wrote:
> >
> > > On Mon, May 7, 2012 at 4:53 PM, Filip Maj <fil@adobe.com<javascript:;>>
> > wrote:
> > >
> > > > Agree with your points on it being easier in XML format, however this
> > is
> > > a
> > > > purely Android-specific thing, no? Enabling "browser plugins"?
> > > >
> > > > I really don't care, it just seems to me to make it Java-y since it
> is
> > > > pure Android.
> > >
> > >
> > > I think you can make the case that we already have, or will have, other
> > > platform-specific things that might make sense to live in a config.xml
> > type
> > > of container.  Do we have some kind of a story for that?
> > >
> > > --
> > > Patrick Mueller
> > > http://muellerware.org
> > >
> >
>
>
> --
> Simon Mac Donald
> http://hi.im/simonmacdonald
>

--0016e6d7848a1e4e4e04bf7f26d7--