>This recent security talk talks about why inline scripts are on the way >out: >https://www.youtube.com/watch?feature=player_embedded&v=WljJ5guzcLs
Thanks for this, listening to it now :) >A good amount of the spec deals with application distribution, which is >out >of our hands when talking about App Stores. Yeah.. Not much can be done, oh well. >It uses a separate AppCache manifest to define what files are in the >bundle. Does this not imply that the whitelist is still in effect via the >Network: section of the AppCache manifest? I guess the underlying question here is, how do the various web view implementations that cordova rely on handle app cache?
