Re: [iOS 4.x] cordova-plugin-whitelist deficiencies

2015-07-08 Thread Shazron
FYI, we get to revisit this whitelist stuff again for iOS 9 with it's Application Transport Security (ATS): https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/index.html#//apple_ref/doc/uid/TP40016240 Should be relatively simple -- convert access tags to

[iOS 4.x] cordova-plugin-whitelist deficiencies

2015-07-08 Thread Shazron
Related: https://issues.apache.org/jira/browse/CB-9329 From the README: https://github.com/apache/cordova-plugin-whitelist The Android whitelist supports allow-navigation, allow-intent and access. The iOS whitelist supports allow-navigation only currently. The docs mention access SHOULD be

Re: [iOS 4.x] cordova-plugin-whitelist deficiencies

2015-07-08 Thread Andrew Grieve
On Wed, Jul 8, 2015 at 4:47 AM, Shazron shaz...@gmail.com wrote: FYI, we get to revisit this whitelist stuff again for iOS 9 with it's Application Transport Security (ATS):

Re: [iOS 4.x] cordova-plugin-whitelist deficiencies

2015-07-08 Thread Shazron
The docs mention access SHOULD be supported, but CSP is the way to go. Therefore access needs to be supported on iOS for native code requests (see failing FileTransfer tests CB-9329) since CSP is only in the context of the UIWebView. This is duplication of definitions unless we