[ https://issues.apache.org/jira/browse/CB-2342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13569058#comment-13569058 ]
Shazron Abdullah commented on CB-2342: -------------------------------------- As commented by Andrew Grieve, CDVSound.m does not set the User-Agent, thus all network connections from the plugin bypasses the whitelist. How to set the User-Agent header is documented here in "Upgrading to 2.3.0": https://github.com/apache/cordova-ios/blob/master/guides/Cordova%20Plugin%20Upgrade%20Guide.md > Media API allows non-whitelisted audio to be played > --------------------------------------------------- > > Key: CB-2342 > URL: https://issues.apache.org/jira/browse/CB-2342 > Project: Apache Cordova > Issue Type: Bug > Components: iOS > Reporter: Shazron Abdullah > Assignee: Shazron Abdullah > Fix For: 2.5.0 > > > Repro steps: > 1. Locate an audio file that can be played from a network location > 2. Make sure that the location of the file from (1) is not in the whitelist > config.xml > 3. Play the audio file using the Media API > Expected: > Media file does not play, it is rejected by the whitelist. > Actual: > Media file plays, it is not rejected by the whitelist. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira