[
https://issues.apache.org/jira/browse/CB-4026?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dan Moore updated CB-4026:
--------------------------
Attachment: index.js
This is the index.js that makes a super simple call to an outside network
resource that should be blocked by www/config.xml settings.
> config.xml whitelist not respected in android
> ---------------------------------------------
>
> Key: CB-4026
> URL: https://issues.apache.org/jira/browse/CB-4026
> Project: Apache Cordova
> Issue Type: Bug
> Components: CLI
> Affects Versions: 2.9.0
> Environment: $ cordova -v
> 2.9.0
> $ npm -v
> 1.3.1
> Centos 6
> Reporter: Dan Moore
> Assignee: Filip Maj
> Attachments: index.js
>
>
> I can create a sample application and change the whitelist to restrict the
> host, but the app in the emulator can still access other hosts.
> To replicate:
> * cordova create Bar1; cd Bar1; cordova platforms add android;
> * edit the access line in www/config.xml to be '<access origin="example.com"
> />'
> * update index.js to be the file attached.
> * build and deploy the app to the emulator
> Expected:
> no network access will be allowed
> Reality:
> you see a console.log line (via adb logcat) with XML text in it
> I tested this in my android 2.3.3 emulator. I googled for 'android emulator
> ignores whitelist phonegap' but didn't see anything relevant.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
