Re: Doing some late night work, and I found this

2016-01-27 Thread Ian Clelland
It definitely is interesting -- I haven't tried it out anywhere, but there are tests for it that at least show how to use it: https://android.googlesource.com/platform/cts/+/764c7c7/tests/tests/webkit/src/android/webkit/cts/PostMessageTest.java It looks like it just works with strings on the

Re: file transfer test failures on Android

2015-08-27 Thread Ian Clelland
... and it's already committed. Never mind :) On Thu, Aug 27, 2015 at 2:28 PM, Ian Clelland iclell...@chromium.org wrote: I think Alexander is correct; it should be coalescing any combination of whitespace characters into a single space; otherwise we risk changing the semantics of the header

Re: file transfer test failures on Android

2015-08-27 Thread Ian Clelland
I think Alexander is correct; it should be coalescing any combination of whitespace characters into a single space; otherwise we risk changing the semantics of the header value. On Wed, Aug 26, 2015 at 5:43 PM, Joe Bowser bows...@gmail.com wrote: Actually, I'm OK with either. We should be

Re: File.spec.144 purpose

2015-08-21 Thread Ian Clelland
Yes and no -- it looks like a deliberate change, but it wasn't the original intention of the test -- the test was put in place as part of https://issues.apache.org/jira/browse/CB-6428, and it originally tested that it could copy just the file plugin's assets into local storage. CB-6428 is about

Re: Unable to use .IN domain

2015-08-17 Thread Ian Clelland
in is not a reserved keyword Java, but it is in C# -- are you building a Windows Phone or Windows application? It looks like Jesse's https://www.npmjs.com/package/valid-identifier package is catching this. On Sat, Aug 15, 2015 at 12:57 AM, heman...@leegan.in wrote: Dear Sir, I would like

Re: Unable to use .IN domain

2015-08-17 Thread Ian Clelland
, if 'in' was reserved there. My team is hiring! @purplecabbage risingj.com On Mon, Aug 17, 2015 at 5:32 AM, Ian Clelland iclell...@chromium.org wrote: in is not a reserved keyword Java, but it is in C# -- are you building a Windows Phone or Windows application? It looks like Jesse's https

Re: [iOS] proposed major whitelist change

2015-07-20 Thread Ian Clelland
+1 to CSP as the right way to do it. This all sounds very similar to what we ended up doing with the Android whitelist plugins: Default is (ugh) *, and the strong recommendation is to use CSP to actually filter requests from the WebView. On Mon, Jul 20, 2015 at 7:24 PM, Shazron shaz...@gmail.com

Re: Sticky Channels

2015-06-10 Thread Ian Clelland
, 2015 at 7:27 AM, Ian Clelland iclell...@chromium.org wrote: On Tue, Jun 9, 2015 at 10:19 AM, Andrew Grieve agri...@chromium.org wrote: I think the only place sticky channels are used is for startup events (deviceready, nativeready, pluginsready, etc). I think you could probably change

Re: Sticky Channels

2015-06-09 Thread Ian Clelland
On Tue, Jun 9, 2015 at 10:19 AM, Andrew Grieve agri...@chromium.org wrote: I think the only place sticky channels are used is for startup events (deviceready, nativeready, pluginsready, etc). I think you could probably change them to fire multiple times without breaking too much, but the

Cordova Service Worker plugin

2015-04-27 Thread Ian Clelland
It's a bit late for an announcement, since we actually published this a couple of weeks ago, but Google's Cordova team has built a Service Worker plugin for iOS Cordova apps. It's npm-published exclusively, so you can finally install this without cloning the repo, so maybe that makes this a good

Re: Cordova Service Worker plugin

2015-04-27 Thread Ian Clelland
this as opposed to the network API? On Mon, Apr 27, 2015 at 7:20 AM, Ian Clelland iclell...@chromium.org wrote: It's a bit late for an announcement, since we actually published this a couple of weeks ago, but Google's Cordova team has built a Service Worker plugin for iOS Cordova apps. It's npm

Re: [Vote] Tools Release

2015-04-20 Thread Ian Clelland
+1 Verified signatures and hashes Verified tarball contents against public repository Created and ran iOS (3.8.0) and Android (4.0.0) applications. On Fri, Apr 17, 2015 at 11:43 AM, Parashuram N (MS OPEN TECH) panar...@microsoft.com wrote: Voting +1 * Verified signatures and hashes *

Re: [Vote] 4.0.0 Android Release

2015-04-15 Thread Ian Clelland
+1 Verified package integrity against signatures, checksums and public repo at the same commit. Successfully built and ran mobilespec.

Re: Android 4.0 Blog Post

2015-04-15 Thread Ian Clelland
On Wed, Apr 15, 2015 at 1:47 PM, Treggiari, Leo leo.treggi...@intel.com wrote: If anyone has the time to educate me, then please pardon my ignorance. Then you're suggesting that if I'm writing a cross-platform app, I stick with the legacy whitelist plugin until all of the platforms I care

Re: proposal for cordova cli

2015-04-15 Thread Ian Clelland
This is a general issue with command line tools, but can be solved in a consistent way. I'll usually do something like this: cordova build android date As output, I see: ... BUILD SUCCESSFUL Total time: 31.314 secs Built the following apk(s):

Re: [Vote] 4.0.0 Android Release

2015-04-09 Thread Ian Clelland
On Thu, Apr 9, 2015 at 1:26 PM, Treggiari, Leo leo.treggi...@intel.com wrote: Do the whitelist changes mean that current access origin entries in a config.xml file will be ignored the next time that a developer builds their project? If so, that will certainly surprise some developers. Yes,

Re: Camera: When was Crop added and why?

2015-04-01 Thread Ian Clelland
On Tue, Mar 31, 2015 at 10:38 AM, Joe Bowser bows...@gmail.com wrote: Hey I'm working on Camera plugin issues in JIRA, and I noticed that we added Crop to the Camera plugin. I'm wondering when this was done, and where the JIRA issue or discussion of adding this

Re: [VOTE] Cordova-Plugin-Whitelist and Cordova-Plugin-Legacy-Whitelist Plugins Release (attempt 2)

2015-03-31 Thread Ian Clelland
a plugin doesn't get installed due to version issues. -Steve On Mar 30, 2015 6:18 PM, Andrew Grieve agri...@chromium.org wrote: Mark - I like that idea as well. On Mon, Mar 30, 2015 at 6:33 PM, Ian Clelland iclell...@chromium.org wrote: On 30 Mar 2015 4:52 pm, Mark Koudritsky kam

Re: [VOTE] Cordova-Plugin-Whitelist and Cordova-Plugin-Legacy-Whitelist Plugins Release (attempt 2)

2015-03-31 Thread Ian Clelland
. If no engine is specified, install away. Thoughts? On Mon, Mar 30, 2015 at 12:49 PM, Ian Clelland iclell...@chromium.org wrote: So this isn't a -1, unless we can't fix the problem in cordova-lib. And it's okay, I think, to fix it in cordova-lib/master and release that as well. Nothing

Re: [VOTE] Cordova-Plugin-Whitelist and Cordova-Plugin-Legacy-Whitelist Plugins Release (attempt 2)

2015-03-30 Thread Ian Clelland
So this isn't a -1, unless we can't fix the problem in cordova-lib. And it's okay, I think, to fix it in cordova-lib/master and release that as well. Nothing is actually broken by publishing either app-hello-world or plugin-whitelist until we release a version of tools that is pinned to the new

Re: [VOTE] Cordova-Plugin-Whitelist and Cordova-Plugin-Legacy-Whitelist Plugins Release

2015-03-26 Thread Ian Clelland
Yeah :( Hash changes, code changes, checksums and pgp signatures change... all necessitates a new vote. At least we get to abort early. On Thu, Mar 26, 2015 at 1:28 PM, Parashuram N (MS OPEN TECH) panar...@microsoft.com wrote: Should we have to restart the vote thread, now that the tag will

Re: crosswalk engine plugin for Cordova Android 4.0.0 release

2015-03-25 Thread Ian Clelland
/engineering/shrinking-git-repository-move-githubcom Thanks, -ningxin On Tue, Mar 24, 2015 at 9:02 AM, Ian Clelland iclell...@chromium.org wrote: On Tue, Mar 24, 2015 at 6:15 AM, Hu, Ningxin ningxin...@intel.com wrote: Crosswalk engine plugin is expected to work with upcoming Cordova

Re: Cordova WP8: switching to Newtonsoft.Json

2015-03-24 Thread Ian Clelland
I'm not sure about whether Cordova has any specific policies -- there's no hard rule that says we can't use third-party code, and even include it in our distributions (see Cordova-Android and okhttp, for instance), but we should probably discuss it on-list first. There are definitely rules,

Re: [DISCUSS] Whitelist Legacy Whitelist Plugins Release @1.0.0

2015-03-24 Thread Ian Clelland
We should definitely do that -- and I think we should release them simultaneously with cordova-app-hello-world, since it now references cordova-plugin-whitelist by that name (I had to install it from local git repo, but it still wasn't a perfectly smooth experience). On Mon, Mar 23, 2015 at 7:18

Re: [DISCUSS] Whitelist Legacy Whitelist Plugins Release @1.0.0

2015-03-24 Thread Ian Clelland
from npm? Leo -Original Message- From: iclell...@google.com [mailto:iclell...@google.com] On Behalf Of Ian Clelland Sent: Tuesday, March 24, 2015 6:42 AM To: dev@cordova.apache.org Subject: Re: [DISCUSS] Whitelist Legacy Whitelist Plugins Release @1.0.0

Re: [DISCUSS] Cordova App Hello World Release 3.9.0

2015-03-23 Thread Ian Clelland
This includes https://github.com/apache/cordova-app-hello-world/commit/2e856b845a0134e7056bdc74f89cafcf483a379f, right? If so, +1 for releasing! On Mon, Mar 23, 2015 at 1:54 PM, Steven Gill stevengil...@gmail.com wrote: Does anyone have any reason to delay a cordova-app-hello-world release?

Whitelist-unplug: iOS Edition

2015-03-19 Thread Ian Clelland
I've rebased the unplug-whitelist branch against cordova-ios master, and it's passing almost all of the mobile-spec tests, using the new whitelist plugin. (I'll be addressing the last few very shortly) If anyone wants to take a look and comment, either here or on CB-7747, I'd appreciate the

Re: [DISCUSS] Cordova-Android 4.0.0 Release

2015-03-16 Thread Ian Clelland
you know that on Android FileReader triggers shouldInterceptRequest() with Blob URLs!? Separate thread is already happening re: whitelists, so once that's figured out, it's just docs afaict. On Mon, Mar 2, 2015 at 10:52 PM, Ian Clelland iclell...@chromium.org wrote

Re: [DISCUSS] Cordova-Android 4.0.0 Release

2015-03-16 Thread Ian Clelland
than I would have liked, but did you know that on Android FileReader triggers shouldInterceptRequest() with Blob URLs!? Separate thread is already happening re: whitelists, so once that's figured out, it's just docs afaict. On Mon, Mar 2, 2015 at 10:52 PM, Ian Clelland

Re: Android's new Whitelist Plugins

2015-03-04 Thread Ian Clelland
On Tue, Mar 3, 2015 at 8:20 PM, Nikhil Khandelwal nikhi...@microsoft.com wrote: Here are my thoughts on the default behavior: - navigation should be disabled. - XHR network request should be enabled. And application launch through intent URLs should also be disabled. (IMO) That's not a bad

Re: [DISCUSS] Cordova-Android 4.0.0 Release

2015-03-02 Thread Ian Clelland
On Mon, Mar 2, 2015 at 6:00 PM, Jesse purplecabb...@gmail.com wrote: We should start a new whitelist plugin related thread. Why is a plugin blocking a release? Default (aka no-plugin) behavior should be to allow all network requests shouldn't it? Well, that just might be a blacklist then

Re: Android - Merging unplug-whitelist branch

2015-02-12 Thread Ian Clelland
. More time on master means more real-world testing before it being released. On Wed, Feb 11, 2015 at 10:23 PM, Ian Clelland iclell...@chromium.org wrote: Not specifically, yet -- I have done manual testing on it so far, and was going to work with Andrew to put proper unit tests in before

Re: [VOTE] Plugins Release

2015-02-12 Thread Ian Clelland
That's odd -- in the Apache repo, the tags appear to be correct (and they are on my local repos as well) -- GitHub is the only place I see that bad tag. GitHub also does have the correct commits (4330db8 and 1882bfb) as well, but the r0.3.0 tag isn't applied to the commit in -device. What I

Re: ArrayBuffers in WP8 Plugins

2015-02-11 Thread Ian Clelland
The File plugin should have that -- spec test 104 tests calling FileWriter.write() with an ArrayBuffer as an argument. The write() method in File.cs looks like it uses JSON.JsonHelper.Deserialize to deserialize it, though -- you might have to dig into the bridge to see exactly how and where it

Android - Merging unplug-whitelist branch

2015-02-11 Thread Ian Clelland
I've been keeping the whitelist breakout on a branch for some time now, but since this is something that we want to get into Cordova 4.0.0, it will have to be merged in soon. I've rebased it against master as of this afternoon, and pushed it into a branch - unplug-whitelist-4.0.0 -- It passes all

Re: Android - Merging unplug-whitelist branch

2015-02-11 Thread Ian Clelland
2015 at 1:29:51 PM Ian Clelland iclell...@chromium.org wrote: I've been keeping the whitelist breakout on a branch for some time now, but since this is something that we want to get into Cordova 4.0.0, it will have to be merged in soon. I've rebased it against master as of this afternoon

Re: [DISCUSS] Cordova-Android 4.0.0 Release

2015-02-04 Thread Ian Clelland
On Wed, Feb 4, 2015 at 7:58 PM, Fu, Junwei junwei...@intel.com wrote: What are the test cases don't work for Crosswalk? I'd like to do whatever I can to help. So, Crosswalk 10 (and, I believe, 11) work great for Cordova. There is a failing test in File Transfer, though, that appears to be a

Re: [DISCUSS] cordova-ios 3.8.0 release

2015-02-04 Thread Ian Clelland
). On Wed, Feb 4, 2015 at 7:30 AM, Ian Clelland iclell...@chromium.org wrote: +1 for a new release to fix these. Question: Should a no-new-features-bug-fix-only release be 3.7.1, rather than 3.8.0? On Tue Feb 03 2015 at 9:20:53 PM Andrew Grieve agri...@chromium.org wrote: I know

Re: [DISCUSS] cordova-ios 3.8.0 release

2015-02-04 Thread Ian Clelland
+1 for a new release to fix these. Question: Should a no-new-features-bug-fix-only release be 3.7.1, rather than 3.8.0? On Tue Feb 03 2015 at 9:20:53 PM Andrew Grieve agri...@chromium.org wrote: I know you've been single-handing iOS lately, so thanks for your hard work Shaz! Your list

Re: Cordova Android plugin with a maven dependency?

2015-02-02 Thread Ian Clelland
Hi Brien, Are you building with Gradle, or with Ant? The new Gradle build system has the ability to do that -- it's what I've been using for the Crosswalk plugin. You can see how it's done in the GitHub repo at https://github.com/clelland/cordova-crosswalk-engine , but basically, the plugin.xml

Re: [Code Review] Gradle Changes

2015-01-08 Thread Ian Clelland
On Tue Jan 06 2015 at 4:09:47 PM Andrew Grieve agri...@chromium.org wrote: For anyone following the gradle work that's been happening, I have a PR that overhauls how settings are overridden. Rather than using custom environment variables, it uses Gradle properties. This is exactly what

Re: How to handle CSP for XHR in Cordova 4.0

2014-12-19 Thread Ian Clelland
into org.apache.cordova.legacy-whitelist. The source is in the cordova-plugins repo; it hasn't been published yet. Ian -Chuck -Original Message- From: Ian Clelland [mailto:iclell...@chromium.org] Sent: Wednesday, December 17, 2014 1:02 PM To: dev@cordova.apache.org Subject: Re: How

Re: How to handle CSP for XHR in Cordova 4.0

2014-12-17 Thread Ian Clelland
, alternate policy. For what it's worth, here's how this is defined in the Windows world: ApplicationContentUriRules Rule Match=https://www.google.com; Type=include / /ApplicationContentUriRules -Chuck -Original Message- From: Ian Clelland [mailto:iclell

Re: How to handle CSP for XHR in Cordova 4.0

2014-12-15 Thread Ian Clelland
not great practice. inline, with or without eval is an XSS waiting to happen, in a web app. -Chuck -Original Message- From: Ian Clelland [mailto:iclell...@google.com] Sent: Friday, December 12, 2014 9:34 AM To: dev@cordova.apache.org Subject: Re: How to handle CSP for XHR in Cordova

How to handle CSP for XHR in Cordova 4.0

2014-12-12 Thread Ian Clelland
I'm just building the new optional whitelist plugins for Cordova Android and iOS 4.x, and I'm thinking about how to encourage developers to use CSP for network requests, as opposed to a Cordova-implemented-whitelist-which-probably-leaks-like-a-sieve. (Note: This is really just about things like

Re: How to handle CSP for XHR in Cordova 4.0

2014-12-12 Thread Ian Clelland
? -Michal On Fri, Dec 12, 2014 at 9:13 AM, Ian Clelland iclell...@chromium.org wrote: I'm just building the new optional whitelist plugins for Cordova Android and iOS 4.x, and I'm thinking about how to encourage developers to use CSP for network requests, as opposed to a Cordova

Re: 4.0 Sprint Tasks (Another Hey, let's ship 4.0.x soon post)

2014-12-11 Thread Ian Clelland
On Thu Dec 11 2014 at 2:51:04 PM Joe Bowser bows...@gmail.com wrote: On Thu Dec 11 2014 at 11:46:44 AM Andrew Grieve agri...@chromium.org wrote: On Thu, Dec 11, 2014 at 2:24 PM, Joe Bowser bows...@gmail.com wrote: On Wed Dec 10 2014 at 8:03:10 AM Andrew Grieve agri...@chromium.org

Re: Browserify JS is in

2014-12-11 Thread Ian Clelland
On Thu Dec 11 2014 at 9:29:08 PM Anis KADRI anis.ka...@gmail.com wrote: On Thu, Dec 11, 2014 at 1:45 PM, Michal Mocny mmo...@chromium.org wrote: 25MB is for the one-time cordova-cli install, and not overhead for the app. Its not perfect but not a blocker imho. Agreed. In terms of size

Re: [Android] Gradle is brittle, Android Studio broke my builds

2014-12-10 Thread Ian Clelland
On Tue Dec 09 2014 at 5:18:47 PM Joe Bowser bows...@gmail.com wrote: Hey I just upgraded to Android Studio 1.0 and now none of my 4.0 builds work. I'm getting gradle errors everywhere, and I have no idea how to resolve them. I'll file an issue, but this is pretty much a blocker since

Re: WebView Promise and W3C standards

2014-12-10 Thread Ian Clelland
On Wed Dec 10 2014 at 10:17:38 AM Andrew Grieve agri...@chromium.org wrote: userland means that plugins won't be able to use them unless every plugin also includes a copy of the polyfill within it. Looking at our core APIs, seems maybe it's just battery-status that will require it. Should we

Re: [Android] Gradle is brittle, Android Studio broke my builds

2014-12-10 Thread Ian Clelland
. Ian On Wed Dec 10 2014 at 9:06:06 AM Ian Clelland iclell...@chromium.org wrote: On Tue Dec 09 2014 at 5:18:47 PM Joe Bowser bows...@gmail.com wrote: Hey I just upgraded to Android Studio 1.0 and now none of my 4.0 builds work. I'm getting gradle errors everywhere, and I have no idea how

Re: Plugins blog post review

2014-12-09 Thread Ian Clelland
PR sent :) I cleaned up a lot of the change log. I'll go back through the plugins themselves to update the README files, too. (We really need to get better at our commit messages) Sorry, I'm not in CA this week. Have fun! Ian On Tue Dec 09 2014 at 12:34:03 AM Steven Gill stevengil...@gmail.com

Re: Plugins blog post review

2014-12-09 Thread Ian Clelland
And going over the list, I realized that I didn't merge in the whitelist-breakout-compatibility changes in file-transfer and inappbrowser :( Oh well, I suppose I can volunteer to release those two next week. Ian On Tue Dec 09 2014 at 9:28:45 AM Ian Clelland iclell...@chromium.org wrote: PR

Re: 4.0 Sprint Tasks (Another Hey, let's ship 4.0.x soon post)

2014-12-08 Thread Ian Clelland
On Sun Dec 07 2014 at 11:54:29 PM Joe Bowser bows...@gmail.com wrote: Hey After messing with the JS for a week, I decided for now to stop work on MozillaView. I think I've managed to prove that the concept is at least possible, but I really feel that it's still too unstable to actually show

Re: [Android] MozillaView Update: PoC is working

2014-12-08 Thread Ian Clelland
That's great news, Josh - glad to hear another positive data point :) I'll look at the code again today, (and maybe Andrew can weigh in faster than I can figure it out) but I think that there is a solution to the minSdkVersion issue in the gradle config; possibly involving a build-extras file.

Re: WebView Promise and W3C standards

2014-12-05 Thread Ian Clelland
I have two reasons for not wanting this as a plugin (both of which, I'm sure, are entirely subjective) The biggest one is just that native support for this really is coming quickly, and one day, we'll be able to remove it, because just about every platform that we care about will have support

Re: [VOTE] Plugins Release Dec 2, 2014

2014-12-03 Thread Ian Clelland
+1 * Verified archive contents against public repos at the matching hashes * Verified signatures of release packages * Ran mobile spec on Android (5.0, 4.4.4) and iOS (6.0, 7.0.6 and 8.0.2) On Tue Dec 02 2014 at 7:18:35 PM Steven Gill stevengil...@gmail.com wrote: Please review and vote on the

Re: [Discuss] Plugins release

2014-11-25 Thread Ian Clelland
+1, I heartily support this. I'll take a look at the PRs and call out any that I think need extra consideration. (We here in Canada can spend some time on Thursday and Friday merging some of them in :) ) On Mon Nov 24 2014 at 5:28:51 PM Steven Gill stevengil...@gmail.com wrote: I want to do a

Re: Introduction

2014-11-25 Thread Ian Clelland
Welcome, Daniel! That's a really interesting project -- I'm looking forward to trying that out. How much work (if any) has gone in to the OSX or Linux components? Do you see this eventually becoming a first-class Cordova platform, or do you have different plans for it? Ian On Tue Nov 25 2014

Re: Firefox OS problem

2014-11-25 Thread Ian Clelland
What was the actual problem, John? (I'm worried that I may be a similar sort of user; I'm seeing almost exactly the same result trying to add the browser platform, even with the latest tools) On Mon Nov 24 2014 at 5:13:03 PM Michal Mocny mmo...@chromium.org wrote: [[Stupid User] Problem] or

Re: [iOS 8] WKWebView moving forward

2014-11-19 Thread Ian Clelland
On Tue Nov 18 2014 at 2:00:34 PM Jesse purplecabb...@gmail.com wrote: Shaz's solution has less impact and seems more elegant. // if ([self respondsToSelector:@selector(nativeFullPath:)]) { If no-one ( generically ) has provided the nativeFullPath method, then use it as is, otherwise call

Re: [GitHub] cordova-plugin-file-transfer pull request: CB-7944 Pending unsuppo...

2014-11-14 Thread Ian Clelland
Looks good, thanks! I've pushed it up to master. On Fri Nov 14 2014 at 8:11:27 AM MariaBukharina g...@git.apache.org wrote: Github user MariaBukharina commented on the pull request: https://github.com/apache/cordova-plugin-file-transfer/ pull/48#issuecomment-63062423 Thaks for you

Re: I've fixed an issue. What's next?

2014-11-14 Thread Ian Clelland
Well, I think what you've just done (pinging the list) is pretty close to the right next step. You should probably assign the issue back to Shaz with a note directed to him asking him to take a look and merge it in. (I'd merge it, but I haven't been following iOS 8 development closely enough to

Re: I've fixed an issue. What's next?

2014-11-14 Thread Ian Clelland
, and the crosswalk plugin refuses to install :) ) If not, we would have to do a #ifdef __IPHONE_8_0 macro in the code. On Fri, Nov 14, 2014 at 11:18 AM, Shazron shaz...@gmail.com wrote: Thanks Julio! I'll comment on the PR itself. Shaz On Fri, Nov 14, 2014 at 8:42 AM, Ian Clelland iclell

Re: Whitelist breakout update

2014-11-12 Thread Ian Clelland
:, or even URLs that have custom handlers on each platform. 2014-11-04 14:03 GMT-02:00 Ian Clelland iclell...@chromium.org: On Tue Nov 04 2014 at 10:46:52 AM Frederico Galvão frederico.gal...@pontoget.com.br wrote: So we actually have 4 new plugins: org.apache.cordova.whitelist

Re: Suggestion: Warning about usage of patterns that conflict with the Firefox OS CSP

2014-11-12 Thread Ian Clelland
I'm not familiar enough with the FirefoxOS architecture, but on Android, we had also considered the possibility of injecting a Content-Security-Policy in the response header for the application's start page -- this would be more secure, arguably, than a meta tag. The biggest problem is that that

Re: plugin.xml config-file for json files

2014-11-11 Thread Ian Clelland
Relevant existing work: https://tools.ietf.org/html/rfc6902 - JSON Patch https://github.com/benjamine/jsondiffpatch - JSON diff / patch -- not sure if it uses the same format as the RFC On Tue Nov 11 2014 at 2:38:11 PM Jesse purplecabb...@gmail.com wrote: Adding json-file would/could lead to

Re: Review: Tools Release blog post

2014-11-10 Thread Ian Clelland
Are there any changes at all to plugman that necessitate its release, or is it just being released so that there's a version that uses the new cordova-lib? It seems odd that it's in the announcement, but missing from the releasenotes. On Fri Nov 07 2014 at 5:22:51 PM Mark Koudritsky

Re: cordova 64-bit support

2014-11-10 Thread Ian Clelland
I know that's been our Android policy; I though that iOS was roughly we support the current release and the one previous release, which would mean that we're already good to start just supporting iOS 7 and 8 exclusively. (Not that it's a big difference -- a 1-month delay is about what it would

Re: cordova 64-bit support

2014-11-07 Thread Ian Clelland
The question doesn't reference any particular platform, for one. Is this a Windows phone question? An iOS question? Android? Workstation? There's no actual answer to it, as stated. I totally agree that we should document which platforms support / require 64-bit binaries, along with what we

Re: Let's try to release Cordova-Android 4.0.x soon

2014-11-05 Thread Ian Clelland
I'd love to see us get that out. Ideally, I'd like to see both the pluggable webviews and pluggable whitelists go out with it. Then we can get whitelist plugin, a real Crosswalk plugin, and a GeckoView plugin, published, and we can see what else the community can come up with, with all of the new

Re: Whitelist breakout update

2014-11-04 Thread Ian Clelland
org.apache.cordova.intent-whitelist. On Mon, Nov 3, 2014 at 10:08 PM, Ian Clelland iclell...@chromium.org wrote: On Mon Nov 03 2014 at 4:05:51 PM Marcel Kinard cmarc...@gmail.com wrote: This sounds very interesting and relatively graceful. For a user upgrading to this new world, what

Whitelist breakout update

2014-10-30 Thread Ian Clelland
I've spent the majority of the week finishing up the whitelist-breakout code, and I'd invite the rest of the community to take a look, before we make anything official. In order to retain some kind of backward compatibility with existing apps (because it's a terrible situation for everyone when

Re: [cordova-js] replaceNavigator

2014-10-27 Thread Ian Clelland
for this in cordova.js -- defineGetterSetter might be the one; I don't remember specifically. Would it be possible to use the utility methods instead? They're pretty well tested on all platforms. Ian On Fri, Oct 24, 2014 at 8:41 AM, Ian Clelland iclell...@chromium.org wrote: I'm sorry that I

Re: [cordova-js] replaceNavigator

2014-10-24 Thread Ian Clelland
I'm sorry that I missed this, and that it never got the review that it deserved -- thanks for at least taking the right step and giving the whole dev community the chance to review it first, though. According to a bug report this morning ( https://issues.apache.org/jira/browse/CB-7868), it looks

Re: whitelist as a plugin

2014-10-10 Thread Ian Clelland
it on the 4.0.x branch. On Thu, Oct 9, 2014 at 2:28 PM, Andrew Grieve agri...@chromium.org wrote: It's technically a breaking change, so agree 4.0.x makes sense. On Thu, Oct 9, 2014 at 12:09 PM, Joe Bowser bows...@gmail.com wrote: This should land in 4.0.x On Oct 9, 2014 7:38 AM, Ian Clelland

Re: whitelist as a plugin

2014-10-09 Thread Ian Clelland
to a plugin. I'm hoping medium-term that CSP can replace the use-case of #1. On Mon, Jul 7, 2014 at 10:21 PM, Ian Clelland iclell...@chromium.org javascript:; wrote: What would be the security implication of removing it from core? No access at all

Re: whitelist as a plugin

2014-10-09 Thread Ian Clelland
CB-7747, for those following along at home. On Thu, Oct 9, 2014 at 10:38 AM, Ian Clelland iclell...@chromium.org wrote: I'm running into more and more problems caused by the whitelist (today, it's because of the dual use of the internal whitelist for should be able to navigate to URL

Re: [VOTE] Tools Release

2014-10-07 Thread Ian Clelland
platform https://github.com/apache/cordova-lib/pull/96 CB-7715 Fix windows build if folder has '.(js|htm|etc)' in name https://github.com/apache/cordova-lib/pull/99 Thx! Sergey -Original Message- From: iclell...@google.com [mailto:iclell...@google.com] On Behalf Of Ian Clelland

Re: Independent platform release summary

2014-10-07 Thread Ian Clelland
(b) was mostly made in jest; it definitely fails the should be monotonically increasing test for version numbering schemes :) (d) is attractive, and we could probably make it work. It would mean that CLI versions would likely move way ahead of platform versions, but that's OK. The big change from

Re: [VOTE] Tools Release

2014-10-07 Thread Ian Clelland
since 3.7.0 was tagged seem like they should probably go into the next release anyway, so I'd probably just want to re-branch from master for 4.0.0, or 10.0.0, or whatever the next version turns out to be. Ian On Tue, Oct 7, 2014 at 7:16 AM, Ian Clelland iclell...@chromium.org wrote: That's awesome

Re: List replies

2014-10-07 Thread Ian Clelland
There used to be a Reply-To header, telling the MUA to reply to dev@cordova.apache.org. It looks like that was removed just a few days ago (I see it on messages from Oct 2, but not from Oct 3) I've no idea why it changed, or who did it, but I'm certain that's the difference. Ian On Tue, Oct 7,

Re: [VOTE] Tools Release

2014-10-06 Thread Ian Clelland
FYI, I just opened CB-7718 as a blocking issue against CordovaLib. I haven't tracked down the cause (except that it's somewhere in the CB-6481 code) but if we were to re-open the vote, I'd have to -1 it. On Fri, Oct 3, 2014 at 7:39 PM, Steven Gill stevengil...@gmail.com wrote: Okay, taking this

Re: [VOTE] Tools Release

2014-10-06 Thread Ian Clelland
...@google.com] On Behalf Of Ian Clelland Sent: Monday, October 6, 2014 7:57 AM To: Steven Gill Cc: Shazron; dev@cordova.apache.org Subject: Re: [VOTE] Tools Release FYI, I just opened CB-7718 as a blocking issue against CordovaLib. I haven't tracked down the cause (except that it's somewhere

Re: Translations

2014-10-06 Thread Ian Clelland
I'm working on these now -- they should be mostly done by the end of the day today. Victor -- there were already some changes proposed to the spanish translations in the Device plugin here: https://github.com/apache/cordova-plugin-device/pull/17 -- some of them are independent of your changes,

Re: project version info

2014-10-03 Thread Ian Clelland
On Fri, Oct 3, 2014 at 10:58 AM, Michal Mocny mmo...@chromium.org wrote: The reason CLI is reporting that number is because we tried to go semver in an odd way (CAD-SEM) and CLI version was supposed to be just the SEM part and the CAD was just informational -- which hasn't worked out so well.

Re: Cordova Android 3.5.1 XAS Security Vulnerability -- possibility of releasing a 2.7-based patched version

2014-10-02 Thread Ian Clelland
That patch fixes the startURL / errorURL issue, which is one of the major components of the 3.5.1 security release (CVE-2014-3500). The other issue is CVE-2014-3502, which is that intent urls can be launched by a Cordova app regardless of the whitelist settings. There isn't a patch which

Re: Independent platform release summary

2014-10-02 Thread Ian Clelland
On Thursday, October 2, 2014, Steven Gill stevengil...@gmail.com wrote: We would have to restart the tools vote to change the version. I don't see much difference from jumping to 4.0 compared to 5.0 or 10.0 It's entirely psychological. A big jump is just leaving the older versioning further

Re: WKWebView for iOS8

2014-09-27 Thread Ian Clelland
Fantastic news if it works! Do we have any idea whether a page loaded with this API will have the ability to navigate to other URLs in the same origin? On 27 Sep 2014 10:08, Shazron shaz...@gmail.com wrote: Fixed 8 hrs ago!  http://trac.webkit.org/changeset/174029/trunk On Friday, September

Re: plugin with AAR

2014-09-23 Thread Ian Clelland
Work in progress is serious here. I wouldn't count on the Gradle build being completely stable until you see a 3.7 or a 4.0 release candidate. If you're developing plugins with specialized build requirements using Gradle, we're very eager to accommodate you. Just be aware that it's a moving

Re: new NPM 2.x

2014-09-22 Thread Ian Clelland
It shouldn't matter for users, but I have seen several issues in the past where using the wrong version of npm means that you can't publish modules or plugins. It's something to be aware of, at least. On Mon, Sep 22, 2014 at 12:30 PM, Ray Camden rayca...@adobe.com wrote: Being lazy, but can you

Re: prepare logic decoupling between LIB and Platforms

2014-09-19 Thread Ian Clelland
It would seem that the separation in that case should be between what and how -- make -lib responsible for what needs to be done (add an icon, add a splash screen, set the start page), and the platforms responsible for actually implementing it. (Obviously easy to say; I'm sure there are a hundred

Re: Cordova Meetup @ Google Berlin

2014-09-17 Thread Ian Clelland
@ list could make it! If you can, there's a signup form at https://docs.google.com/forms/d/1oXkGhlaoTKBU1fbcxdLX0HFXThbcU7wonPoLry8SX1A -- put your name down, and I'll make sure that there's a spot for you On Fri, Sep 12, 2014 at 6:01 PM, Ian Clelland iclell...@chromium.org wrote: On Friday

Re: Android: activityResultKeepRunning

2014-09-12 Thread Ian Clelland
The patch that they applied was actually taken from the Cordova-crosswalk-engine plugin, so in this case, they're keeping up with us :) And yeah, once we get this all sorted out, it should be documented. On Fri, Sep 12, 2014 at 1:55 AM, Andrey Kurdumov kant2...@googlemail.com wrote: Hi, I

Re: Is there any plan to make InAppBrowser plugin based on CordovaWebView

2014-09-12 Thread Ian Clelland
On Fri, Sep 12, 2014 at 2:23 AM, julio cesar sanchez jcesarmob...@gmail.com wrote: About the WKWebView and UIWebView being the only renderers because the apple rule, ludei's cocoonjs uses their own renderer based on chromium Do you have a source for that claim? It would be incredibly cool

Re: Is there any plan to make InAppBrowser plugin based on CordovaWebView

2014-09-12 Thread Ian Clelland
Technically we could browse the web, though. Just setting access origin=* / content src=https://www.google.com/; / in your config.xml is enough to turn your app into a general-purpose Cordova-enabled web browser. That's what I mean by a strict reading, though: A properly-sandboxed

Cordova Meetup @ Google Berlin

2014-09-12 Thread Ian Clelland
Since it appears that PhoneGapDayEU has been postponed, and there are several of us already committed to going to Berlin, we (Google) figured that we might take the opportunity to host a Cordova / PhoneGap meetup in our Berlin office, on the original conference dates. I've put up a quick site

Re: Cordova Meetup @ Google Berlin

2014-09-12 Thread Ian Clelland
:43 PM, Ian Clelland iclell...@chromium.org javascript:; wrote: Since it appears that PhoneGapDayEU has been postponed, and there are several of us already committed to going to Berlin, we (Google) figured that we might take the opportunity to host a Cordova / PhoneGap meetup

Re: Cordova Meetup @ Google Berlin

2014-09-12 Thread Ian Clelland
make more sense in San Francisco next month. On Fri, Sep 12, 2014 at 1:43 PM, Ian Clelland iclell...@chromium.org javascript:; wrote: Since it appears that PhoneGapDayEU has been postponed, and there are several of us already committed to going to Berlin, we (Google) figured

Re: [DISCUSS] Plugins Release

2014-09-11 Thread Ian Clelland
I've seen the same thing with the new test runner.. it appears that the framework itself is rather fragile, and certain things, like calling done() twice within a test, will cause the whole test runner to go wonky. The file tests did this a couple of weeks ago, and I resolved it with CB-7431; I

  1   2   3   4   5   6   >