[ https://issues.apache.org/jira/browse/CB-2451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Filip Maj updated CB-2451: -------------------------- Fix Version/s: (was: 2.5.0) 2.6.0 > HTML5 audio/video tags bypass the whitelist > ------------------------------------------- > > Key: CB-2451 > URL: https://issues.apache.org/jira/browse/CB-2451 > Project: Apache Cordova > Issue Type: Bug > Components: iOS > Affects Versions: 2.3.0, 2.4.0 > Reporter: Shazron Abdullah > Assignee: Shazron Abdullah > Fix For: 2.6.0 > > > Looks like audio/video tags do bypass the whitelist due to our recent > changes. This line returns nil when it shouldn't: > https://github.com/apache/cordova-ios/blob/e8a740176a465092b0d55dc9aee9a3e0ac314691/CordovaLib/Classes/CDVURLProtocol.m#L107 > Tested using: > {code} > <audio controls="controls"> > <source src="http://cordova.apache.org/downloads/BlueZedEx.mp3" /> > </audio> > {code} > and in config.xml: > {code} > <access origin="http://google.com" /> > {code} -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira