Repository: cordova-docs Updated Branches: refs/heads/master 570286a01 -> 1f1a47e89
CB-11936 - Add docs for the four new App Transport Security (ATS) keys This closes #648 Project: http://git-wip-us.apache.org/repos/asf/cordova-docs/repo Commit: http://git-wip-us.apache.org/repos/asf/cordova-docs/commit/1f1a47e8 Tree: http://git-wip-us.apache.org/repos/asf/cordova-docs/tree/1f1a47e8 Diff: http://git-wip-us.apache.org/repos/asf/cordova-docs/diff/1f1a47e8 Branch: refs/heads/master Commit: 1f1a47e89df44bd1a0d88dbbf8477f1869632c13 Parents: 570286a Author: Shazron Abdullah <shaz...@apache.org> Authored: Thu Oct 6 11:39:10 2016 -0700 Committer: Shazron Abdullah <shaz...@apache.org> Committed: Mon Oct 24 13:34:16 2016 -0700 ---------------------------------------------------------------------- www/docs/en/dev/guide/appdev/whitelist/index.md | 23 ++++++++++++++++++-- 1 file changed, 21 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cordova-docs/blob/1f1a47e8/www/docs/en/dev/guide/appdev/whitelist/index.md ---------------------------------------------------------------------- diff --git a/www/docs/en/dev/guide/appdev/whitelist/index.md b/www/docs/en/dev/guide/appdev/whitelist/index.md index d0c25d0..9ac2071 100644 --- a/www/docs/en/dev/guide/appdev/whitelist/index.md +++ b/www/docs/en/dev/guide/appdev/whitelist/index.md @@ -106,12 +106,31 @@ For cordova-ios versions prior to 4.0.0, see the older versions of this document [Application Transport Security (ATS)](https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33) is new in iOS 9 (Xcode 7). This new feature acts as a whitelist for your app. The cordova cli will automatically convert `<access>` and `<allow-navigation>` tags to the appropriate ATS directives. -The `<access>` and `<allow-navigation>` tags support these two new attributes below, which have their equivalents in ATS: +The `<access>` and `<allow-navigation>` tags support these three attributes below, which have their equivalents in ATS: 1. minimum-tls-version (String, defaults to 'TLSv1.2') 2. requires-forward-secrecy (Boolean, defaults to 'true') +3. requires-certificate-transparency (Boolean, defaults to 'false', new in iOS 10) -See the [ATS Technote](https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33) for details. +* example: + + ```xml + <access origin='https://cordova.apache.org' minimum-tls-version='TLSv1.1' requires-forward-secrecy='false' requires-certificate-transparency='true' /> + ``` + +In iOS 10 and above, the `<access>` tag supports these three attributes below, when paired with the origin wildcard `*`. These attributes also have their equivalents in ATS: + +1. allows-arbitrary-loads-in-media (Boolean, defaults to 'false', new in iOS 10) +2. allows-arbitrary-loads-in-web-content (Boolean, defaults to 'false', new in iOS 10) +3. allows-local-networking (Boolean, defaults to 'false', new in iOS 10) + +* example: + + ```xml + <access origin='*' allows-arbitrary-loads-in-media='true' allows-arbitrary-loads-in-web-content='true' allows-local-networking='true' /> + ``` + +See the [ATS Technote](https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33) for more details. ## BlackBerry 10 Whitelisting --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cordova.apache.org For additional commands, e-mail: commits-h...@cordova.apache.org