Hi Florian,

Unfortunately, I didn't reproduced this issue by Rajil 's steps, It would be 
helpful if you could share your code or simplify your usage scenario to 
reproduce the issue.

But Rajil give me an important information:
>Moreover,  I also have came across this issue in chrome browser while testing 
>my app.  I'm running my app on local tomcat and referring live server website 
>to authenticate the username and password.  Chrome also
>thrown same error.  This issue is looking more relative to browser.

So could you please try the following workaround?

You can try to use the "-xwalk-command-line=--disable-web-security" option in 
crosswalk-crodova, add a text file called "xwalk-command-line"(no suffix) to 
assert/ directory of your android package. This file should contain a single 
line, representing the xwalk command line to run, the line would be:

xwalk --disable-web-security
Please let me know if you have any question.

Thanks,
Junwei.

--------------------------------------------------------------------------------------------------------

Message: 2

Date: Thu, 18 Dec 2014 12:55:50 +0100

From: Florian Sailer 
<[email protected]<mailto:[email protected]>>

To: 
[email protected]<mailto:[email protected]>

Subject: [Crosswalk-help] Crosswalk Cordova 10 - External URL

Message-ID: 
<[email protected]<mailto:[email protected]>>

Content-Type: text/plain; charset="iso-8859-15"; Format="flowed"



Hi Junwei,



is there any update on this issue? I experienced exactly the same Problem 
(/getting 'Access-Control-Allow-Origin'/) accessing external URLs 
with/crosswalk//cordova 10.



thanks!



Florian/



On Thu, Nov 27, 2014 at 11:37 AM, Fu, Junwei <junwei.fu at intel.com  
<https://lists.crosswalk-project.org/mailman/listinfo/crosswalk-help>> wrote:



>/   Hi Rajil,

/>/

/>/

/>/

/>/  Thanks for your patience.

/>/

/>/

/>/

/>/  I will follow your steps to reproduce this issue, and reply you as soon as 
/>/  possible.

/>/

/>/

/>/

/>/  Thanks,

/>/

/>/  Junwei.

//

//[...]



/>/  Hello experts;

/>/

/>/  I am using crosswalk in my cordova based application. Everything was />/  
working fine with cordova 3.5 and crosswalk 9 release.

/>/

/>/  As soon as I upgraded my application to cordova 3.6.3 now and crosswalk 
/>/  cordova 10, I started getting error "No 'Access-Control-Allow-Origin'

/>/  header is present on the requested resource." while calling external URL 
to />/  authenticate user login.

/>/

/>/  Do i need to change any code or put any configuration file to work with 
/>/  external URL in my cordova based android application using crosswalk 10?

/>/

/>/  I was searching on this issue and found following URL:

/>/  https://crosswalk-project.org/documentation/manifest/xwalk_hosts.html

/>/

/>/  it says to put manifest.json with "xwalk_hosts" tag and i did following:

/>/

/>/  Created new file manifest.json under www directory along with index.html 
/>/  file and written following content in it.

/>/

/>/  "xwalk_hosts": [

/>/  "*"

/>/  ]

/>/

/>/  but this is not working. Any solution to this?

/>/

/>/

/>/  regards,

/>/  Rajil Davda

/>/  Applied Software

/>



-------------- next part --------------

An HTML attachment was scrubbed...

URL: 
<http://lists.crosswalk-project.org/pipermail/crosswalk-help/attachments/20141218/a7a0ea6c/attachment-0001.html>



------------------------------



Message: 3

Date: Thu, 18 Dec 2014 14:09:33 +0100

From: Florian Sailer 
<[email protected]<mailto:[email protected]>>

To: 
[email protected]<mailto:[email protected]>

Subject: [Crosswalk-help] OpenSSL Vulnerabilities

Message-ID: 
<[email protected]<mailto:[email protected]>>

Content-Type: text/plain; charset=ISO-8859-15; format=flowed



Hi,



i have an app in the play store based on Crosswalk Cordova 9 (Android, ARM).

Yesterday i received the following warning form the store:



##

Your app is statically linking against a version of OpenSSL that has multiple 
security vulnerabilities. You should update OpenSSL as soon as possible.

The vulnerabilities were addressed in OpenSSL versions beginning with 1.0.1h, 
1.0.0m, and 0.9.8za. To confirm your OpenSSL version, you can do a grep via ("$ 
unzip -p YourApp.apk | strings | grep "OpenSSL""). For more information about 
the vulnerability, please consult 
http://www.openssl.org/news/secadv_20140605.txt.

To confirm that you've upgraded correctly, upload the updated version to the 
Developer Console and check back after five hours.

Please note, while it's unclear whether these specific issues affect your 
application, applications with vulnerabilities that expose users to risk of 
compromise may be considered "dangerous products" and subject to removal from 
Google Play.

##



Im having difficulties to figure out which piece of the stack is using a 
statically linked version OpenSSL.

Could this warning actually be related to Crosswalk Cordova?



Thanks,



Florian



--

_______________________________________________
Crosswalk-help mailing list
[email protected]
https://lists.crosswalk-project.org/mailman/listinfo/crosswalk-help

Reply via email to