CB-7291: Add defaults to external whitelist
Project: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/repo Commit: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/commit/c8b00ec2 Tree: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/tree/c8b00ec2 Diff: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/diff/c8b00ec2 Branch: refs/heads/master Commit: c8b00ec240a564805fa6f2173e3a582dbca6e869 Parents: c6f47be Author: Ian Clelland <[email protected]> Authored: Thu Aug 21 15:59:05 2014 -0400 Committer: Archana Naik <[email protected]> Committed: Thu Aug 28 11:11:37 2014 -0700 ---------------------------------------------------------------------- framework/res/xml/config.xml | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/blob/c8b00ec2/framework/res/xml/config.xml ---------------------------------------------------------------------- diff --git a/framework/res/xml/config.xml b/framework/res/xml/config.xml index 50459b9..6f4a264 100644 --- a/framework/res/xml/config.xml +++ b/framework/res/xml/config.xml @@ -30,7 +30,20 @@ Apache Cordova Team </author> - <access origin="*"/> + <!-- Allow access to arbitrary URLs in the Cordova WebView. This is a + development mode setting, and should be changed for production. --> + <access origin="http://*/*"/> + <access origin="https://*/*"/> + + <!-- Grant certain URLs the ability to launch external applications. This + behaviour is set to match that of Cordova versions before 3.6.0, and + should be reviewed before launching an application in production. It + may be changed in the future. --> + <access origin="tel:*" launch-external="yes"/> + <access origin="geo:*" launch-external="yes"/> + <access origin="mailto:*"; launch-external="yes"/> + <access origin="sms:*" launch-external="yes"/> + <access origin="market:*" launch-external="yes"/> <!-- <content src="http://mysite.com/myapp.html"; /> for external pages --> <content src="index.html" />
