Added: cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html
URL: 
http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html?rev=1884020&view=auto
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html (added)
+++ cordova/site/public/docs/en/dev/guide/appdev/allowlist/index.html Wed Dec  
2 09:23:53 2020
@@ -0,0 +1,2814 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="utf-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+    <meta name="format-detection" content="telephone=no">
+    <meta name="viewport" content="user-scalable=no, initial-scale=1, 
maximum-scale=1, minimum-scale=1, width=device-width" />
+    <meta name="description" content="Securely grant an application access to 
external resources. ">
+
+    <title>
+        
+            
+                Allow List Guide - Apache Cordova
+            
+        
+    </title>
+
+    <link rel="SHORTCUT ICON" href="/favicon.ico"/>
+
+    
+
+    
+    
+        
+
+        
+    
+
+    <link rel="canonical" 
href="https://cordova.apache.org/docs/en/dev/guide/appdev/allowlist/";>
+
+    <!-- CSS -->
+    <link rel="stylesheet" type="text/css" href="/static/css/main.css">
+    <link rel="stylesheet" type="text/css" href="/static/css/lib/syntax.css">
+    <!-- Algolia Search CSS -->
+    <link rel="stylesheet" 
href="https://cdn.jsdelivr.net/docsearch.js/1/docsearch.min.css"; />
+
+    <!-- Fonts -->
+    <!-- For attribution information, see www/attributions.html -->
+    <link 
href='https://fonts.googleapis.com/css?family=Raleway:700,400,300,700italic,400italic,300italic'
 rel='stylesheet' type='text/css'>
+
+    <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media 
queries -->
+    <!--[if lt IE 9]>
+        <script 
src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js";></script>
+        <script 
src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js";></script>
+    <![endif]-->
+    <script type="text/javascript">
+        var disqus_developer = 1; // this would set it to developer mode
+    </script>
+
+    <!-- JS -->
+    <script defer type="text/javascript" 
src="/static/js/lib/jquery-2.1.1.min.js"></script>
+    <script defer type="text/javascript" 
src="/static/js/lib/bootstrap.min.js"></script>
+
+    <script>
+    
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+    (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new 
Date();a=s.createElement(o),
+    
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+    
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+    ga('create', 'UA-64283057-3', 'auto');
+    ga('send', 'pageview');
+</script>
+
+</head>
+
+<body>
+    <header>
+    <a class="scroll-point pt-top" name="top"></a>
+    <nav class="navbar navbar-inverse navbar-fixed-top">
+        <div class="container-fluid">
+            <div class="navbar-header">
+                <button type="button" class="navbar-toggle collapsed" 
data-toggle="collapse" data-target="#navbar" aria-expanded="false" 
aria-controls="navbar">
+                    <span class="sr-only">Toggle navigation</span>
+                    <span class="icon-bar"></span>
+                    <span class="icon-bar"></span>
+                    <span class="icon-bar"></span>
+                </button>
+                <a class="navbar-brand" href="/"><img id="logo_top" 
src="/static/img/cordova-logo-newbrand.svg"/></a>
+            </div>
+            <div id="navbar" class="navbar-collapse collapse">
+                <div class="nav_bar_center">
+                    <ul class="nav navbar-nav">
+                        <li class="active">
+                            <a href="/docs/en/latest/">Documentation</a>
+                        </li>
+                        <li >
+                            <a href="/plugins">Plugins</a>
+                        </li>
+                        <li >
+                            <a href="/blog" id="blog_button">Blog<span 
class="badge" id="new_blog_count"></span></a>
+                        </li>
+                        <li >
+                            <a href="/contribute">Contribute</a>
+                        </li>
+                        <li >
+                            <a href="/contribute/team.html">Team</a>
+                        </li>
+                        <li>
+                            <a href="/#getstarted">Get Started</a>
+                        </li>
+                        <li>
+                            <form class="navbar-form navbar-right" 
id="header-search-form" role="search">
+                                <div class="input-group">
+                                    
+                                        
+                                    
+                                    <input id="header-search-field" 
type="text" placeholder="Search 'dev' docs..." class="form-control hidden-xs" 
autocomplete="off">
+                                </div>
+                            </form>
+                        </li>
+                    </ul>
+                </div>
+            </div><!--/.navbar-collapse -->
+        </div>
+    </nav>
+    <div id="_fixed_navbar_spacer" style="padding-top:50px"></div>
+</header>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<div class="docs">
+
+    <!-- Table of Contents -->
+    <div class="hidden-xs hidden-sm site-toc-container">
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Introduction
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/overview/index.html">
+                Overview
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Create apps
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/cli/index.html">
+                Create your first app
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/cli/template.html">
+                Templates for apps
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/support/index.html">
+                Platform support
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Develop for platforms
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/android/index.html">
+                Android
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/ios/index.html">
+                iOS
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/windows/index.html">
+                Windows
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/osx/index.html">
+                OS X
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/electron/index.html">
+                Electron
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../platform_plugin_versioning_ref/index.html">
+                Manage versions and platforms
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../platform_pinning/index.html">
+                Platform pinning
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../config_ref/images.html">
+                Customize icons
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../cordova/storage/storage.html">
+                Store data
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/appdev/privacy/index.html">
+                Manage privacy
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/appdev/security/index.html">
+                Manage security
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="this-page" 
href="../../../guide/appdev/allowlist/index.html">
+                Allow List
+            </a>
+            
+                <span class="entry-highlight"></span>
+            
+        
+
+        
+        <div id="page-toc" class="page-toc"></div>
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Create plugins
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/hybrid/plugins/index.html">
+                Create a plugin
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Develop for platforms
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/android/plugin.html">
+                Android
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/ios/plugin.html">
+                iOS
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/platforms/windows/plugin.html">
+                Windows
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../plugin_ref/plugman.html">
+                Use Plugman
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Advanced Topics
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/hybrid/webviews/index.html">
+                Embed Cordova in native apps
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/next/index.html">
+                Next Steps
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Reference
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" href="../../../config_ref/index.html">
+                Config.xml
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../cordova/events/events.html">
+                Events
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../reference/cordova-cli/index.html">
+                CLI Reference
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../guide/appdev/hooks/index.html">
+                Hooks
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" href="../../../plugin_ref/spec.html">
+                Plugin.xml
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <span class="toc-section-heading">
+                Plugin APIs
+            </span>
+        
+
+        
+        
+
+        
+        <ul class="site-toc">
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-battery-status/index.html">
+                Battery Status
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-camera/index.html">
+                Camera
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-device/index.html">
+                Device
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-dialogs/index.html">
+                Dialogs
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-file/index.html">
+                File
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-geolocation/index.html">
+                Geolocation
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-inappbrowser/index.html">
+                Inappbrowser
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-media/index.html">
+                Media
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-media-capture/index.html">
+                Media Capture
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-network-information/index.html">
+                Network Information
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-screen-orientation/index.html">
+                Screen Orientation
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-splashscreen/index.html">
+                Splashscreen
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-statusbar/index.html">
+                Statusbar
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+
+    <li>
+        
+            <a class="" 
href="../../../reference/cordova-plugin-vibration/index.html">
+                Vibration
+            </a>
+            
+        
+
+        
+        
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+</ul>
+
+        
+    </li>
+    
+</ul>
+
+    </div>
+
+    <!-- Page content -->
+    <div class="page-content-container">
+        <div class="page-content">
+            <div class="content-header">
+
+                <!-- ToC Dropdown (for XS and SM sizes only) -->
+                <div class="toc-dropdown dropdown visible-xs-block 
visible-sm-block">
+                    <button class="btn btn-default dropdown-toggle" 
type="button" id="tocDropdown" data-toggle="dropdown" aria-haspopup="true" 
aria-expanded="true">
+                        Table of Contents
+                        <span class="caret"></span>
+                    </button>
+                    <ul class="dropdown-menu">
+                        
+
+
+
+
+<li>
+    <a class="" href="../../../guide/overview/index.html">
+        Overview
+    </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../guide/cli/index.html">
+        Create your first app
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/cli/template.html">
+        Templates for apps
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/support/index.html">
+        Platform support
+    </a>
+</li>
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/android/index.html">
+        Android
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/ios/index.html">
+        iOS
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/windows/index.html">
+        Windows
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/osx/index.html">
+        OS X
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/electron/index.html">
+        Electron
+    </a>
+</li>
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../platform_plugin_versioning_ref/index.html">
+        Manage versions and platforms
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../platform_pinning/index.html">
+        Platform pinning
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../config_ref/images.html">
+        Customize icons
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../cordova/storage/storage.html">
+        Store data
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/appdev/privacy/index.html">
+        Manage privacy
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/appdev/security/index.html">
+        Manage security
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="this-page" href="../../../guide/appdev/allowlist/index.html">
+        Allow List
+    </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../guide/hybrid/plugins/index.html">
+        Create a plugin
+    </a>
+</li>
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/android/plugin.html">
+        Android
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/ios/plugin.html">
+        iOS
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/platforms/windows/plugin.html">
+        Windows
+    </a>
+</li>
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../plugin_ref/plugman.html">
+        Use Plugman
+    </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../guide/hybrid/webviews/index.html">
+        Embed Cordova in native apps
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/next/index.html">
+        Next Steps
+    </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+<li>
+    <a class="" href="../../../config_ref/index.html">
+        Config.xml
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../cordova/events/events.html">
+        Events
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-cli/index.html">
+        CLI Reference
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../guide/appdev/hooks/index.html">
+        Hooks
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../plugin_ref/spec.html">
+        Plugin.xml
+    </a>
+</li>
+
+
+
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-battery-status/index.html">
+        Battery Status
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-camera/index.html">
+        Camera
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-device/index.html">
+        Device
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-dialogs/index.html">
+        Dialogs
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-file/index.html">
+        File
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-geolocation/index.html">
+        Geolocation
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-inappbrowser/index.html">
+        Inappbrowser
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-media/index.html">
+        Media
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-media-capture/index.html">
+        Media Capture
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-network-information/index.html">
+        Network Information
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-screen-orientation/index.html">
+        Screen Orientation
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" 
href="../../../reference/cordova-plugin-splashscreen/index.html">
+        Splashscreen
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-statusbar/index.html">
+        Statusbar
+    </a>
+</li>
+
+
+
+
+<li>
+    <a class="" href="../../../reference/cordova-plugin-vibration/index.html">
+        Vibration
+    </a>
+</li>
+
+
+
+
+
+
+
+
+
+
+                    </ul>
+                </div>
+
+                
+                
+
+                    
+                    
+                    
+                    
+                    
+
+                    
+                    
+
+                        
+                        
+                            
+                        
+
+                        <a class="edit" 
href="https://github.com/apache/cordova-docs/tree/master/www/docs/en/dev/guide/appdev/allowlist/index.md";><span
 class="glyphicon glyphicon-pencil" aria-hidden="true"></span> Edit Source on 
GitHub</a>
+                    
+                
+
+                <!-- Language dropdown -->
+                <div class="dropdown">
+                    <button class="btn btn-default dropdown-toggle" 
type="button" id="languageDropdown" data-toggle="dropdown" aria-haspopup="true" 
aria-expanded="true">
+                        English
+                        <span class="caret"></span>
+                    </button>
+
+                    <!-- List all languages -->
+                    <ul class="dropdown-menu" 
aria-labelledby="languageDropdown">
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/de/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Deutsch
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/en/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    <span class="selected">
+                                        English
+                                    </span>
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/es/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Español
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/fr/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Français
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/it/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Italiano
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/ja/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    日本語
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/ko/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    한국어
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/pl/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Polski
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/ru/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Русский
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/sl/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    Slovene
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/zh-cn/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    简体中文
+                                
+                            </a>
+                        </li>
+                        
+
+                        
+                        
+                        
+                        
+
+                        
+
+                        
+                        
+
+                        <li>
+                            <a 
href="/docs/zh-tw/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    繁體中文
+                                
+                            </a>
+                        </li>
+                        
+                    </ul>
+                </div>
+
+                <!-- Version dropdown -->
+                <div class="dropdown">
+                    <button class="btn btn-default dropdown-toggle" 
type="button" id="versionDropdown" data-toggle="dropdown" aria-haspopup="true" 
aria-expanded="true">
+                        dev
+                        
+                        <span class="caret"></span>
+                    </button>
+                    <ul class="dropdown-menu" 
aria-labelledby="versionDropdown">
+
+                        <!-- List versions available in this language -->
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+
+                            <a 
href="/docs/en/dev/guide/appdev/allowlist/index.html" class="">
+                                
+                                    <span class="selected">
+                                        
+                                dev
+                                
+                            
+                                    </span>
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/latest/" class="missing-page">
+                                
+                                    
+                                9.x
+                                
+                                    (Latest)
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/8.x/" class="missing-page">
+                                
+                                    
+                                8.x
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/7.x/" class="missing-page">
+                                
+                                    
+                                7.x
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/6.x/" class="missing-page">
+                                
+                                    
+                                6.x
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/5.4.0/" class="missing-page">
+                                
+                                    
+                                5.4.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/5.1.1/" class="missing-page">
+                                
+                                    
+                                5.1.1
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/5.0.0/" class="missing-page">
+                                
+                                    
+                                5.0.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/4.0.0/" class="missing-page">
+                                
+                                    
+                                4.0.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.6.0/" class="missing-page">
+                                
+                                    
+                                3.6.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.5.0/" class="missing-page">
+                                
+                                    
+                                3.5.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.4.0/" class="missing-page">
+                                
+                                    
+                                3.4.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.3.0/" class="missing-page">
+                                
+                                    
+                                3.3.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.2.0/" class="missing-page">
+                                
+                                    
+                                3.2.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.1.0/" class="missing-page">
+                                
+                                    
+                                3.1.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/3.0.0/" class="missing-page">
+                                
+                                    
+                                3.0.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.9.0/" class="missing-page">
+                                
+                                    
+                                2.9.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.8.0/" class="missing-page">
+                                
+                                    
+                                2.8.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.7.0/" class="missing-page">
+                                
+                                    
+                                2.7.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.6.0/" class="missing-page">
+                                
+                                    
+                                2.6.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.5.0/" class="missing-page">
+                                
+                                    
+                                2.5.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.4.0/" class="missing-page">
+                                
+                                    
+                                2.4.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.3.0/" class="missing-page">
+                                
+                                    
+                                2.3.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.2.0/" class="missing-page">
+                                
+                                    
+                                2.2.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.1.0/" class="missing-page">
+                                
+                                    
+                                2.1.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/2.0.0/" class="missing-page">
+                                
+                                    
+                                2.0.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.9.0/" class="missing-page">
+                                
+                                    
+                                1.9.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.8.1/" class="missing-page">
+                                
+                                    
+                                1.8.1
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.8.0/" class="missing-page">
+                                
+                                    
+                                1.8.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.7.0/" class="missing-page">
+                                
+                                    
+                                1.7.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.6.1/" class="missing-page">
+                                
+                                    
+                                1.6.1
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.6.0/" class="missing-page">
+                                
+                                    
+                                1.6.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                        <li>
+                            
+                            
+                                
+                            
+
+                            
+
+                            
+                            
+                            
+
+                            
+                                
+                            
+
+                            <a href="/docs/en/1.5.0/" class="missing-page">
+                                
+                                    
+                                1.5.0
+                                
+                            
+                                
+                            </a>
+                        </li>
+                        
+                    </ul>
+                </div>
+            </div>
+
+            
+            
+            
+
+            
+            
+                
+            
+
+            <!-- Show warnings for special versions -->
+            <!-- dev warning -->
+            
+                <div class="alert docs-alert alert-info" role="alert">
+                    <button type="button" class="close" data-dismiss="alert" 
aria-label="Close">
+                        <span aria-hidden="true">&times;</span>
+                    </button>
+                    This version of the documentation is under development!
+                    <a href="/docs/en/latest/">
+                        Click here for the latest released version.
+                    </a>
+                </div>
+            
+
+            <!-- outdated warning -->
+            
+
+            <!-- plugin version warning -->
+            
+
+            <div id="page-toc-source">
+                <h1>Allow List Guide</h1>
+
+<p>Domain allow listing is a security model that controls access to external 
domains over which your application has no control. Cordova provides a 
configurable security policy to define which external sites may be accessed.</p>
+
+<p>By default, new apps are configured to allow access to any site. Before 
moving your application to production, you should formulate an allow list to 
provide access to specific network domains and subdomains.</p>
+
+<p>While it is possible to implement your own allow list plugin, it is not 
recommended unless your app needs a very specific security policy.</p>
+
+<h2>Network Request Allow List</h2>
+
+<p>Cordova adheres to the <a href="http://www.w3.org/TR/widgets-access/";>W3C 
Widget Access</a> specification, which relies on the 
<code>&lt;access&gt;</code> element within the app&#39;s 
<code>config.xml</code> file, which is located in the project&#39;s top-level 
directory.</p>
+
+<p>This controls which network requests (images, XHRs, etc) are allowed to be 
made to specific domains (via cordova native hooks).</p>
+
+<p>Note: It is suggested to use a <a 
href="#Content-Security-Policy-(CSP)">Content Security Policy (CSP)</a> (see 
below), which is more secure. This network request allow list is mostly 
historical for webviews which do not support CSP.</p>
+
+<p>In <code>config.xml</code>, add <code>&lt;access&gt;</code> tags, like 
this:</p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span 
class="c">&lt;!-- Allow images, xhrs, etc. to google.com --&gt;</span>
+<span class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">"http://google.com";</span> <span class="nt">/&gt;</span>
+<span class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">"https://google.com";</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Access to the subdomain maps.google.com --&gt;</span>
+<span class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">"http://maps.google.com";</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Access to all the subdomains on google.com 
--&gt;</span>
+<span class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">"http://*.google.com";</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Enable requests to content: URLs --&gt;</span>
+<span class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">"content:///*"</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Don't block any requests --&gt;</span>
+<span class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">"*"</span> <span class="nt">/&gt;</span>
+</code></pre></div>
+<p>Without any <code>&lt;access&gt;</code> tags, only requests to 
<code>file://</code> URLs are allowed. However, the default Cordova application 
includes <code>&lt;access origin=&quot;*&quot;&gt;</code> by default.</p>
+
+<p>Note: Allow List cannot block network redirects from a allow listed remote 
website (i.e. <code>http</code> or <code>https</code>) to a non-allowlisted 
website. Use CSP rules to mitigate redirects to non-allowlisted websites for 
webviews that support CSP.</p>
+
+<p>Be aware that some websites may automatically redirect from their home page 
to a different url. Example scenarios could be, but not limited to:</p>
+
+<ul>
+<li>Redirecting <code>http</code> protocol requests to the secure 
<code>https</code> SSL/TSL protocol.</li>
+<li>Redirecting to country-specific domain. E.g. 
<code>https://www.google.com</code> to redirect to 
<code>https://www.google.co.uk</code> based on device geography.</li>
+</ul>
+
+<p>Such scenarios may require modified or adding to the allow list additional 
entries beyond your initial requirement. Please consider this when building the 
app&#39;s allow list.</p>
+
+<p>Quirk: Android also allows requests to 
https://ssl.gstatic.com/accessibility/javascript/android/ by default, since 
this is required for TalkBack to function properly.</p>
+
+<h2>Navigation Allow List</h2>
+
+<p>This controls which URLs the WebView itself can be navigated to. It applies 
only to top-level navigations.</p>
+
+<p>By default navigations are only allowed to <code>file://</code> URLs. To 
allow others URLs, you must add <code>&lt;allow-navigation&gt;</code> tags to 
your <code>config.xml</code>:</p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span 
class="c">&lt;!-- Allow links to example.com --&gt;</span>
+<span class="nt">&lt;allow-navigation</span> <span 
class="na">href=</span><span class="s">"http://example.com/*";</span> <span 
class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Wildcards are allowed for the protocol, as a prefix
+     to the host, or as a suffix to the path --&gt;</span>
+<span class="nt">&lt;allow-navigation</span> <span 
class="na">href=</span><span class="s">"*://*.example.com/*"</span> <span 
class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- 
+    A wildcard can be used to allow the entire network, over HTTP and HTTPS.
+    This is *NOT RECOMMENDED*
+--&gt;</span>
+<span class="nt">&lt;allow-navigation</span> <span 
class="na">href=</span><span class="s">"*"</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- The above is equivalent to these three declarations 
--&gt;</span>
+<span class="nt">&lt;allow-navigation</span> <span 
class="na">href=</span><span class="s">"http://*/*";</span> <span 
class="nt">/&gt;</span>
+<span class="nt">&lt;allow-navigation</span> <span 
class="na">href=</span><span class="s">"https://*/*";</span> <span 
class="nt">/&gt;</span>
+<span class="nt">&lt;allow-navigation</span> <span 
class="na">href=</span><span class="s">"data:*"</span> <span 
class="nt">/&gt;</span>
+</code></pre></div>
+<p>Quirks: on Android it also applies to iframes for non-http(s) schemes.</p>
+
+<h2>Intent Allow List</h2>
+
+<p>This controls which URLs the app is allowed to ask the system to open.</p>
+
+<p>In <code>config.xml</code>, add <code>&lt;allow-intent&gt;</code> tags, 
like this:</p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span 
class="c">&lt;!-- Allow links to web pages to open in a browser --&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"http://*/*";</span> <span class="nt">/&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"https://*/*";</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Allow links to example.com to open in a browser 
--&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"http://example.com/*";</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Wildcards are allowed for the protocol, as a prefix
+     to the host, or as a suffix to the path --&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"*://*.example.com/*"</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Allow SMS links to open messaging app --&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"sms:*"</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Allow tel: links to open the dialer --&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"tel:*"</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Allow geo: links to open maps --&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"geo:*"</span> <span class="nt">/&gt;</span>
+
+<span class="c">&lt;!-- Allow all unrecognized URLs to open installed apps
+     *NOT RECOMMENDED* --&gt;</span>
+<span class="nt">&lt;allow-intent</span> <span class="na">href=</span><span 
class="s">"*"</span> <span class="nt">/&gt;</span>
+</code></pre></div>
+<p>Without any <code>&lt;allow-intent&gt;</code> tags, no requests to external 
URLs are allowed. However, the default Cordova application includes a quite 
liberal set of <code>allow-intent</code> entries by default. It is advised to 
narrow this down based on each app&#39;s needs.</p>
+
+<p>On Android, this equates to sending an intent of type 
<strong>BROWSEABLE</strong>.</p>
+
+<p>This allow list applies only to the main Cordova webview, and does not 
apply to any plugins, for example the InAppBrowser webview, or opening links in 
the system web browser. It is only aplied to <strong>hyperlinks</strong> and 
calls to <code>window.open()</code>.</p>
+
+<p>Note: <code>allow-navigation</code> takes precedence over 
<code>allow-intent</code>. Allowing navigation to all URLs with 
<code>&lt;allow-navigation href=&quot;*&quot; /&gt;</code> for example has the 
side effect of &quot;capturing&quot; all intents, so the webview navigates to 
them instead of triggering e.g. external apps.</p>
+
+<h2>Content Security Policy (CSP)</h2>
+
+<p>Controls which network requests (images, XHRs, etc) are allowed to be made 
(via webview directly).</p>
+
+<p>On Android and iOS, the network request allow list (see above) is not able 
to filter all types of requests (e.g. <code>&lt;video&gt;</code> &amp; 
WebSockets are not blocked). So, in addition to the allow list, you should use 
a <a href="http://content-security-policy.com/";>Content Security Policy</a> 
<code>&lt;meta&gt;</code> tag on all of your pages.</p>
+
+<p>Here are some example CSP declarations for your <code>.html</code> 
pages:</p>
+<div class="highlight"><pre><code class="language-html" data-lang="html"><span 
class="c">&lt;!-- Good default declaration:
+    * gap: is required only on iOS (when using UIWebView) and is needed for 
JS-&gt;native communication
+    * https://ssl.gstatic.com is required only on Android and is needed for 
TalkBack to function properly
+    * Disables use of eval() and inline scripts in order to mitigate risk of 
XSS vulnerabilities. To change this:
+        * Enable inline JS: add 'unsafe-inline' to default-src
+        * Enable eval(): add 'unsafe-eval' to default-src
+--&gt;</span>
+<span class="nt">&lt;meta</span> <span class="na">http-equiv=</span><span 
class="s">"Content-Security-Policy"</span> <span 
class="na">content=</span><span class="s">"default-src 'self' data: gap: 
https://ssl.gstatic.com; style-src 'self' 'unsafe-inline'; media-src 
*"</span><span class="nt">&gt;</span>
+
+<span class="c">&lt;!-- Allow everything but only from the same origin and 
foo.com --&gt;</span>
+<span class="nt">&lt;meta</span> <span class="na">http-equiv=</span><span 
class="s">"Content-Security-Policy"</span> <span 
class="na">content=</span><span class="s">"default-src 'self' 
foo.com"</span><span class="nt">&gt;</span>
+
+<span class="c">&lt;!-- This policy allows everything (eg CSS, AJAX, object, 
frame, media, etc) except that 
+    * CSS only from the same origin and inline styles,
+    * scripts only from the same origin and inline styles, and eval()
+--&gt;</span>
+<span class="nt">&lt;meta</span> <span class="na">http-equiv=</span><span 
class="s">"Content-Security-Policy"</span> <span 
class="na">content=</span><span class="s">"default-src *; style-src 'self' 
'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'"</span><span 
class="nt">&gt;</span>
+
+<span class="c">&lt;!-- Allows XHRs only over HTTPS on the same domain. 
--&gt;</span>
+<span class="nt">&lt;meta</span> <span class="na">http-equiv=</span><span 
class="s">"Content-Security-Policy"</span> <span 
class="na">content=</span><span class="s">"default-src 'self' 
https:"</span><span class="nt">&gt;</span>
+
+<span class="c">&lt;!-- Allow iframe to https://cordova.apache.org/ 
--&gt;</span>
+<span class="nt">&lt;meta</span> <span class="na">http-equiv=</span><span 
class="s">"Content-Security-Policy"</span> <span 
class="na">content=</span><span class="s">"default-src 'self'; frame-src 'self' 
https://cordova.apache.org";</span><span class="nt">&gt;</span>
+</code></pre></div>
+<h2>Other Notes</h2>
+
+<p><a 
href="https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33";>Application
 Transport Security (ATS)</a> is new in iOS 9 (Xcode 7). This new feature acts 
as an allow list for your app. Cordova CLI will automatically convert the 
<code>&lt;access&gt;</code> and <code>&lt;allow-navigation&gt;</code> tags to 
the appropriate ATS directives.</p>
+
+<p>The <code>&lt;access&gt;</code> and <code>&lt;allow-navigation&gt;</code> 
tags support these three attributes below, which have their equivalents in 
ATS:</p>
+
+<ol>
+<li><code>minimum-tls-version</code> (String, defaults to 
&#39;TLSv1.2&#39;)</li>
+<li><code>requires-forward-secrecy</code> (Boolean, defaults to 
&#39;true&#39;)</li>
+<li><code>requires-certificate-transparency</code> (Boolean, defaults to 
&#39;false&#39;, new in iOS 10)</li>
+</ol>
+
+<p><strong>Example:</strong></p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span 
class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">'https://cordova.apache.org'</span> <span 
class="na">minimum-tls-version=</span><span class="s">'TLSv1.1'</span> <span 
class="na">requires-forward-secrecy=</span><span class="s">'false'</span> <span 
class="na">requires-certificate-transparency=</span><span 
class="s">'true'</span> <span class="nt">/&gt;</span>
+</code></pre></div>
+<p>In iOS 10 and above, the <code>&lt;access&gt;</code> tag also supports 
these three attributes, described below, when paired with the origin wildcard 
<code>*</code>. These attributes also have their equivalents in ATS:</p>
+
+<ol>
+<li><code>allows-arbitrary-loads-for-media</code> (Boolean, defaults to 
&#39;false&#39;, new in iOS 10. New in cordova-ios@4.5.0, fixed to use the 
proper attribute name). The old attribute 
<code>allows-arbitrary-loads-in-media</code> is now deprecated.</li>
+<li><code>allows-arbitrary-loads-in-web-content</code> (Boolean, defaults to 
&#39;false&#39;, new in iOS 10)</li>
+<li><code>allows-local-networking</code> (Boolean, defaults to 
&#39;false&#39;, new in iOS 10)</li>
+</ol>
+
+<p><strong>Example:</strong></p>
+<div class="highlight"><pre><code class="language-xml" data-lang="xml"><span 
class="nt">&lt;access</span> <span class="na">origin=</span><span 
class="s">'*'</span> <span 
class="na">allows-arbitrary-loads-for-media=</span><span 
class="s">'true'</span> <span 
class="na">allows-arbitrary-loads-in-web-content=</span><span 
class="s">'true'</span> <span class="na">allows-local-networking=</span><span 
class="s">'true'</span> <span class="nt">/&gt;</span>
+</code></pre></div>
+<p>See the <a 
href="https://developer.apple.com/library/prerelease/ios/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33";>ATS
 Technote</a> for more details.</p>
+
+
+            </div>
+        </div>
+        <div class="row">
+            <div class="blue-divider"></div>
+<footer>
+    <div class="container-fluid">
+        <div class="row">
+    <div class="col-sm-9">
+        <h1>More Resources</h1>
+        <div class="row">
+            <div class="col-sm-4">
+                <h2>General</h2>
+                <ul class="nav">
+                    <li>
+                        <a target="_blank" 
href="https://projects.apache.org/project.html?cordova";>Apache Project Page</a>
+                    </li>
+                    <li>
+                        <a 
href="http://www.apache.org/dyn/closer.cgi/cordova";>Source Distribution</a>
+                    </li>
+                    <li>
+                        <a target="_blank" 
href="http://www.apache.org/licenses/LICENSE-2.0";>License</a>
+                    </li>
+                    <li>
+                        <a href="/artwork">Artwork</a>
+                    </li>
+                </ul>
+            </div>
+            <div class="col-sm-4">
+                <h2>Development</h2>
+                <ul class="nav">
+                    <li><a target="_blank" 
href="https://github.com/apache?utf8=%E2%9C%93&amp;q=cordova-";>Source 
Code</a></li>
+                    <li><a target="_blank" 
href="https://issues.apache.org/jira/browse/CB/";>Issue Tracker</a></li>
+                    <li><a target="_blank" 
href="http://stackoverflow.com/questions/tagged/cordova";>Stack Overflow</a></li>
+                    <li><a href="/contact">Mailing List</a></li>
+                    <li><a href="/contribute/nightly_builds.html">Nightly 
builds</a></li>
+                </ul>
+            </div>
+            <div class="col-sm-4">
+                <h2>Apache Software Foundation</h2>
+                <ul class="nav">
+                    <li>
+                        <a target="_blank" href="http://www.apache.org/";>About 
ASF</a>
+                    </li>
+                    <li>
+                        <a target="_blank" 
href="http://www.apache.org/foundation/sponsorship.html";>Become a Sponsor</a>
+                    </li>
+                    <li>
+                        <a target="_blank" 
href="http://www.apache.org/foundation/thanks.html";>Thanks</a>
+                    </li>
+                    <li>
+                        <a target="_blank" 
href="http://www.apache.org/security/";>Security</a>
+                    </li>
+                </ul>
+            </div>
+        </div>
+    </div>
+    <div class="col-sm-3">
+        <h1>Contribute</h1>
+        <p style="padding-top:20px"><strong>Help Cordova move 
forward!</strong></p>
+        <p>Report bugs, improve the docs, or contribute to the code.</p>
+        <a href="/contribute" class="btn btn-lg btn-primary">
+            Learn More
+        </a>
+        <p style="padding-top:20px"> <a 
href="https://twitter.com/apachecordova"; class="twitter-follow-button" 
data-show-count="false">Follow @apachecordova</a></p>
+        <script async defer 
src="https://slack-cordova-io.herokuapp.com/slackin.js";></script>
+    </div>
+</div>
+<p class="copyright_text">
+    Copyright &copy; 2012, 2013, 2015 The Apache Software Foundation, Licensed 
under the <a target="_blank" 
href="http://www.apache.org/licenses/LICENSE-2.0";>Apache License, Version 
2.0</a>.<br/>
+    Apache and the Apache feather logos are <a target="_blank" 
href="http://www.apache.org/foundation/marks/list/";>trademarks</a> of The 
Apache Software Foundation.
+    <br/>
+    "Raleway" font used under license. For details see the <a 
href="/attributions/">attributions page</a>.
+</p>
+
+    </div>
+</footer>
+
+        </div>
+    </div>
+</div>
+
+<script defer type="text/javascript" src="/static/js/lib/toc.min.js"></script>
+<script defer type="text/javascript" src="/static/js/docs.js"></script>
+
+    <script defer type="text/javascript" src="/static/js/index.js"></script>
+    <script defer type="text/javascript" src="/static/js/twitter.js"></script>
+    
+    
+
+
+
+    
+
+
+<script type="text/javascript" 
src="https://cdn.jsdelivr.net/docsearch.js/1/docsearch.min.js";></script>
+<script type="text/javascript">
+    docsearch({
+        apiKey: '0a916ab198bd93d031aa70611271e42e',
+        indexName: 'cordova',
+        inputSelector: '#header-search-field',
+        algoliaOptions: { 'facetFilters': ["version:  dev", "language: en"] }
+    });
+</script>
+
+</body>
+</html>

Modified: cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html
URL: 
http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/appdev/hooks/index.html Wed Dec  2 
09:23:53 2020
@@ -418,8 +418,8 @@
 
     <li>
         
-            <a class="" href="../../../guide/appdev/whitelist/index.html">
-                Whitelisting
+            <a class="" href="../../../guide/appdev/allowlist/index.html">
+                Allow List
             </a>
             
         
@@ -912,21 +912,6 @@
         
     </li>
     
-
-    <li>
-        
-            <a class="" 
href="../../../reference/cordova-plugin-whitelist/index.html">
-                Whitelist
-            </a>
-            
-        
-
-        
-        
-
-        
-    </li>
-    
 </ul>
 
         
@@ -1106,8 +1091,8 @@
 
 
 <li>
-    <a class="" href="../../../guide/appdev/whitelist/index.html">
-        Whitelisting
+    <a class="" href="../../../guide/appdev/allowlist/index.html">
+        Allow List
     </a>
 </li>
 
@@ -1372,15 +1357,6 @@
     </a>
 </li>
 
-
-
-
-<li>
-    <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
-        Whitelist
-    </a>
-</li>
-
 
 
 

Modified: cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html
URL: 
http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/appdev/privacy/index.html Wed Dec  2 
09:23:53 2020
@@ -420,8 +420,8 @@
 
     <li>
         
-            <a class="" href="../../../guide/appdev/whitelist/index.html">
-                Whitelisting
+            <a class="" href="../../../guide/appdev/allowlist/index.html">
+                Allow List
             </a>
             
         
@@ -912,21 +912,6 @@
         
     </li>
     
-
-    <li>
-        
-            <a class="" 
href="../../../reference/cordova-plugin-whitelist/index.html">
-                Whitelist
-            </a>
-            
-        
-
-        
-        
-
-        
-    </li>
-    
 </ul>
 
         
@@ -1106,8 +1091,8 @@
 
 
 <li>
-    <a class="" href="../../../guide/appdev/whitelist/index.html">
-        Whitelisting
+    <a class="" href="../../../guide/appdev/allowlist/index.html">
+        Allow List
     </a>
 </li>
 
@@ -1372,15 +1357,6 @@
     </a>
 </li>
 
-
-
-
-<li>
-    <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
-        Whitelist
-    </a>
-</li>
-
 
 
 

Modified: cordova/site/public/docs/en/dev/guide/appdev/security/index.html
URL: 
http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/appdev/security/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/appdev/security/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/appdev/security/index.html Wed Dec  2 
09:23:53 2020
@@ -420,8 +420,8 @@
 
     <li>
         
-            <a class="" href="../../../guide/appdev/whitelist/index.html">
-                Whitelisting
+            <a class="" href="../../../guide/appdev/allowlist/index.html">
+                Allow List
             </a>
             
         
@@ -912,21 +912,6 @@
         
     </li>
     
-
-    <li>
-        
-            <a class="" 
href="../../../reference/cordova-plugin-whitelist/index.html">
-                Whitelist
-            </a>
-            
-        
-
-        
-        
-
-        
-    </li>
-    
 </ul>
 
         
@@ -1106,8 +1091,8 @@
 
 
 <li>
-    <a class="" href="../../../guide/appdev/whitelist/index.html">
-        Whitelisting
+    <a class="" href="../../../guide/appdev/allowlist/index.html">
+        Allow List
     </a>
 </li>
 
@@ -1375,15 +1360,6 @@
 
 
 
-<li>
-    <a class="" href="../../../reference/cordova-plugin-whitelist/index.html">
-        Whitelist
-    </a>
-</li>
-
-
-
-
 
 
 
@@ -2547,7 +2523,7 @@
 <h2>This guide discusses the following topics:</h2>
 
 <ul>
-<li>Whitelist</li>
+<li>Allow List</li>
 <li>Iframes and the Callback Id Mechanism</li>
 <li>Certificate Pinning</li>
 <li>Self-signed Certificates</li>
@@ -2556,12 +2532,9 @@
 <li>Recommended Articles and Other Resources</li>
 </ul>
 
-<h2>Whitelist</h2>
+<h2>Allow List</h2>
 
-<ul>
-<li><p>Read and understand the <a href="../whitelist/index.html">Whitelist 
Guide</a></p></li>
-<li><p>Domain whitelisting does not work on Android API 10 and below, and WP8 
for iframes and XMLHttpRequest. This means an attacker can load any domain in 
an iframe and any script on that page within the iframe can directly access 
Cordova JavaScript objects and the corresponding native Java objects. You 
should take this into consideration when building applications for these 
platforms. In practice this means making sure you target an Android API higher 
than 10, and that if possible you do not use an iframe to load external content 
- use the inAppBrowser plugin or other third-party plugins.</p></li>
-</ul>
+<p>By default the app&#39;s navigation is unrestricted. It&#39;s recommended 
to restrict the navigation only to trusted domains. Learn more by reading the 
<a href="../allowlist/index.html">Allow List Guide</a></p>
 
 <h2>Iframes and the Callback Id Mechanism</h2>
 

Modified: cordova/site/public/docs/en/dev/guide/cli/index.html
URL: 
http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/cli/index.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/cli/index.html (original)
+++ cordova/site/public/docs/en/dev/guide/cli/index.html Wed Dec  2 09:23:53 
2020
@@ -420,8 +420,8 @@
 
     <li>
         
-            <a class="" href="../../guide/appdev/whitelist/index.html">
-                Whitelisting
+            <a class="" href="../../guide/appdev/allowlist/index.html">
+                Allow List
             </a>
             
         
@@ -912,21 +912,6 @@
         
     </li>
     
-
-    <li>
-        
-            <a class="" 
href="../../reference/cordova-plugin-whitelist/index.html">
-                Whitelist
-            </a>
-            
-        
-
-        
-        
-
-        
-    </li>
-    
 </ul>
 
         
@@ -1106,8 +1091,8 @@
 
 
 <li>
-    <a class="" href="../../guide/appdev/whitelist/index.html">
-        Whitelisting
+    <a class="" href="../../guide/appdev/allowlist/index.html">
+        Allow List
     </a>
 </li>
 
@@ -1372,15 +1357,6 @@
     </a>
 </li>
 
-
-
-
-<li>
-    <a class="" href="../../reference/cordova-plugin-whitelist/index.html">
-        Whitelist
-    </a>
-</li>
-
 
 
 

Modified: cordova/site/public/docs/en/dev/guide/cli/template.html
URL: 
http://svn.apache.org/viewvc/cordova/site/public/docs/en/dev/guide/cli/template.html?rev=1884020&r1=1884019&r2=1884020&view=diff
==============================================================================
--- cordova/site/public/docs/en/dev/guide/cli/template.html (original)
+++ cordova/site/public/docs/en/dev/guide/cli/template.html Wed Dec  2 09:23:53 
2020
@@ -420,8 +420,8 @@
 
     <li>
         
-            <a class="" href="../../guide/appdev/whitelist/index.html">
-                Whitelisting
+            <a class="" href="../../guide/appdev/allowlist/index.html">
+                Allow List
             </a>
             
         
@@ -912,21 +912,6 @@
         
     </li>
     
-
-    <li>
-        
-            <a class="" 
href="../../reference/cordova-plugin-whitelist/index.html">
-                Whitelist
-            </a>
-            
-        
-
-        
-        
-
-        
-    </li>
-    
 </ul>
 
         
@@ -1106,8 +1091,8 @@
 
 
 <li>
-    <a class="" href="../../guide/appdev/whitelist/index.html">
-        Whitelisting
+    <a class="" href="../../guide/appdev/allowlist/index.html">
+        Allow List
     </a>
 </li>
 
@@ -1372,15 +1357,6 @@
     </a>
 </li>
 
-
-
-
-<li>
-    <a class="" href="../../reference/cordova-plugin-whitelist/index.html">
-        Whitelist
-    </a>
-</li>
-
 
 
 



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cordova.apache.org
For additional commands, e-mail: commits-h...@cordova.apache.org

Reply via email to