Re: Suggestion: Warning about usage of patterns that conflict with the Firefox OS CSP

2014-11-12 Thread Frederik Braun
Response inline On 12.11.2014 14:35, Michal Mocny wrote: > We could add to > the default template, or create a plugin that injects it automatically and > try to get developers to install that plugin. > > This has some benefits for security of cordova apps and has been brought up > on these lists

Suggestion: Warning about usage of patterns that conflict with the Firefox OS CSP

2014-11-12 Thread Frederik Braun
Hi, I am not very involved with Cordova, but as far as I understand, Cordova Apps are allowed to use eval, inline scripts etc. We do not allow this in Firefox OS [1] and I am concerned that it may cause some friction when porting existing Cordova apps to Firefox OS and then realizing that a lot o