Hi Junwei;

Thanks for the reply.  Yes.  I confirm that given solution works.

I tested on Cordova 3.6.3 build with followings latest Crosswalk Cordova
builds:
1)  crosswalk-cordova-10.39.235.9-arm
2)  crosswalk-cordova-10.39.235.9-x86
3)  crosswalk-cordova-11.39.258.0-arm
4)  crosswalk-cordova-11.39.258.0-x86

I am looking forward to revise my app with cordova 3.6.3 and
crosswalk-cordova 10.x.  currently have submitted app with cordova 3.5 and
crosswalk-cordova 9.x.

Please confirm one more thin that disabling web-security (i.e. adding xwalk
--disable-web-security)  will not create any issue for app submission in
google play store.



regards,
Rajil Davda
Applied Software



On Fri, Dec 19, 2014 at 6:33 AM, Fu, Junwei <[email protected]> wrote:
>
>  Hi Florian,
>
>
>
> Unfortunately, I didn’t reproduced this issue by Rajil ‘s steps, It would
> be helpful if you could share your code or simplify your usage scenario to
> reproduce the issue.
>
>
>
> But Rajil give me an important information:
>
> >Moreover,  I also have came across this issue in chrome browser while
> testing my app.  I'm running my app on local tomcat and referring live
> server website to authenticate the username and password.  Chrome also
>
> >thrown same error.  This issue is looking more relative to browser.
>
>
>
> So could you please try the following workaround?
>
> You can try to use the "-xwalk-command-line=--disable-web-security" option
> in crosswalk-crodova, add a text file called "xwalk-command-line"(no
> suffix) to assert/ directory of your android package. This file should
> contain a single line, representing the xwalk command line to run, the line
> would be:
>
> xwalk --disable-web-security
>
>  Please let me know if you have any question.
>
>
>
> Thanks,
>
> Junwei.
>
>
>
>
> --------------------------------------------------------------------------------------------------------
>
> Message: 2
>
> Date: Thu, 18 Dec 2014 12:55:50 +0100
>
> From: Florian Sailer <[email protected]>
>
> To: [email protected]
>
> Subject: [Crosswalk-help] Crosswalk Cordova 10 - External URL
>
> Message-ID: <[email protected]>
>
> Content-Type: text/plain; charset="iso-8859-15"; Format="flowed"
>
>
>
> Hi Junwei,
>
>
>
> is there any update on this issue? I experienced exactly the same Problem
> (/getting 'Access-Control-Allow-Origin'/) accessing external URLs
> with/crosswalk//cordova 10.
>
>
>
> thanks!
>
>
>
> Florian/
>
>
>
> On Thu, Nov 27, 2014 at 11:37 AM, Fu, Junwei <junwei.fu at intel.com  <
> https://lists.crosswalk-project.org/mailman/listinfo/crosswalk-help>>
> wrote:
>
>
>
> >/   Hi Rajil,
>
> />/
>
> />/
>
> />/
>
> />/  Thanks for your patience.
>
> />/
>
> />/
>
> />/
>
> />/  I will follow your steps to reproduce this issue, and reply you as
> soon as />/  possible.
>
> />/
>
> />/
>
> />/
>
> />/  Thanks,
>
> />/
>
> />/  Junwei.
>
> //
>
> //[...]
>
>
>
> />/  Hello experts;
>
> />/
>
> />/  I am using crosswalk in my cordova based application. Everything was
> />/  working fine with cordova 3.5 and crosswalk 9 release.
>
> />/
>
> />/  As soon as I upgraded my application to cordova 3.6.3 now and
> crosswalk />/  cordova 10, I started getting error "No
> 'Access-Control-Allow-Origin'
>
> />/  header is present on the requested resource." while calling external
> URL to />/  authenticate user login.
>
> />/
>
> />/  Do i need to change any code or put any configuration file to work
> with />/  external URL in my cordova based android application using
> crosswalk 10?
>
> />/
>
> />/  I was searching on this issue and found following URL:
>
> />/  https://crosswalk-project.org/documentation/manifest/xwalk_hosts.html
>
> />/
>
> />/  it says to put manifest.json with "xwalk_hosts" tag and i did
> following:
>
> />/
>
> />/  Created new file manifest.json under www directory along with
> index.html />/  file and written following content in it.
>
> />/
>
> />/  "xwalk_hosts": [
>
> />/  "*"
>
> />/  ]
>
> />/
>
> />/  but this is not working. Any solution to this?
>
> />/
>
> />/
>
> />/  regards,
>
> />/  Rajil Davda
>
> />/  Applied Software
>
> />
>
>
>
> -------------- next part --------------
>
> An HTML attachment was scrubbed...
>
> URL: <
> http://lists.crosswalk-project.org/pipermail/crosswalk-help/attachments/20141218/a7a0ea6c/attachment-0001.html
> >
>
>
>
> ------------------------------
>
>
>
> Message: 3
>
> Date: Thu, 18 Dec 2014 14:09:33 +0100
>
> From: Florian Sailer <[email protected]>
>
> To: [email protected]
>
> Subject: [Crosswalk-help] OpenSSL Vulnerabilities
>
> Message-ID: <[email protected]>
>
> Content-Type: text/plain; charset=ISO-8859-15; format=flowed
>
>
>
> Hi,
>
>
>
> i have an app in the play store based on Crosswalk Cordova 9 (Android,
> ARM).
>
> Yesterday i received the following warning form the store:
>
>
>
> ##
>
> Your app is statically linking against a version of OpenSSL that has
> multiple security vulnerabilities. You should update OpenSSL as soon as
> possible.
>
> The vulnerabilities were addressed in OpenSSL versions beginning with
> 1.0.1h, 1.0.0m, and 0.9.8za. To confirm your OpenSSL version, you can do a
> grep via ("$ unzip -p YourApp.apk | strings | grep "OpenSSL""). For more
> information about the vulnerability, please consult
> http://www.openssl.org/news/secadv_20140605.txt.
>
> To confirm that you've upgraded correctly, upload the updated version to
> the Developer Console and check back after five hours.
>
> Please note, while it's unclear whether these specific issues affect your
> application, applications with vulnerabilities that expose users to risk of
> compromise may be considered "dangerous products" and subject to removal
> from Google Play.
>
> ##
>
>
>
> Im having difficulties to figure out which piece of the stack is using a
> statically linked version OpenSSL.
>
> Could this warning actually be related to Crosswalk Cordova?
>
>
>
> Thanks,
>
>
>
> Florian
>
>
>
> --
>
>
>
_______________________________________________
Crosswalk-help mailing list
[email protected]
https://lists.crosswalk-project.org/mailman/listinfo/crosswalk-help

Reply via email to