[
https://issues.apache.org/jira/browse/CB-2342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13576197#comment-13576197
]
Shazron Abdullah commented on CB-2342:
--------------------------------------
Looks like audio/video tags do bypass the whitelist due to our recent changes.
This line returns nil when it shouldn't:
https://github.com/apache/cordova-ios/blob/e8a740176a465092b0d55dc9aee9a3e0ac314691/CordovaLib/Classes/CDVURLProtocol.m#L107
Not sure how to fix this yet: cc'ing [~agrieve]
> Media API allows non-whitelisted audio to be played
> ---------------------------------------------------
>
> Key: CB-2342
> URL: https://issues.apache.org/jira/browse/CB-2342
> Project: Apache Cordova
> Issue Type: Bug
> Components: iOS
> Reporter: Shazron Abdullah
> Assignee: Shazron Abdullah
> Fix For: 2.5.0
>
>
> Repro steps:
> 1. Locate an audio file that can be played from a network location
> 2. Make sure that the location of the file from (1) is not in the whitelist
> config.xml
> 3. Play the audio file using the Media API
> Expected:
> Media file does not play, it is rejected by the whitelist.
> Actual:
> Media file plays, it is not rejected by the whitelist.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
