[ https://issues.apache.org/jira/browse/CB-10709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15860114#comment-15860114 ]
Jacob Weber commented on CB-10709: ---------------------------------- In the meantime, could you update the documentation to indicate that iOS won't load iframes unless their domains are in allow-navigation? Right now it says that allow-navigation only controls the top-level navigation, which is wrong. > Allow-navigation rule for iFrame urls on cordova-ios > ---------------------------------------------------- > > Key: CB-10709 > URL: https://issues.apache.org/jira/browse/CB-10709 > Project: Apache Cordova > Issue Type: Bug > Components: iOS > Affects Versions: 6.0.0 > Reporter: Harsha Kiran > Assignee: Shazron Abdullah > Labels: cordova-ios-4.1.1, triaged > Fix For: cordova-ios@4.4.0 > > > Currently with Whitelist plugin set to <allow-navigation="*://domain.com/*"> > doesn't allow navigation to other domains including urls embedded using > iframe on iOS. > EG: If I tried to embed a youtube video using iframe tag with only this rule > <allow-navigation="*://domain.com/*">, it doesn't allow loading of the video > in iframe as youtube.com is not listed in allowed domains. > If we add <allow-navigation="*://youtube.com/*"> it allows the loading of > iframe but will also allow navigation to youtube.com using Javascript i.e > window.open('http://youtube.com'). > With current implementation in cordova-ios, I'm not sure if there is any > solution to allow a domain navigation in iframe and not allow navigation to > that domain using other methods like javascript. > Android ignores the allow-navigation rule for iframe loaded urls, so iOS > should be modified to behave the same? -- This message was sent by Atlassian JIRA (v6.3.15#6346) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org