Also, file-transfer plugin has been deprecated, so is less likely to get
that change applied. Read more about the deprecating and the recommended
transition at
https://cordova.apache.org/blog/2017/10/18/from-filetransfer-to-xhr2.html.


2018-01-06 21:48 GMT+01:00 Simon MacDonald <simon.macdon...@gmail.com>:

> Probably best to create an issue in JIRA and we love PR's.
>
>
> Simon Mac Donald
> http://simonmacdonald.com
>
> On Sat, Jan 6, 2018 at 2:21 PM, Dan Field <dfi...@gmail.com> wrote:
>
> > The Android version of this plugin makes calls to file.delete on abort()
> > and on a failed/partial download().
> >
> > Any thoughts on updating this logic to first write garbage to the file
> > before deleting it to make recovery of sensitive data more difficult?
> I'm
> > getting complaints from my security team that file.delete could
> potentially
> > leave data recoverable, even if it's fairly unlikely.
> >
> > Dan Field
> >
>

Reply via email to