[ 
https://issues.apache.org/jira/browse/CB-10143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Shazron Abdullah updated CB-10143:
----------------------------------
    Description: 
mobile-spec failure in XMLHttpRequest.spec.4 is a known WKWebView issue, where 
CORS is now respected and cannot load files from file:// urls, only http*:// 
urls are allowed.

With CSP off to rule things out:
XHR to yourself of course works, but doesn't really make sense for
real-world use. XHR to a sibling file, parent file, or any child file
results in the error ""Cross origin requests are only supported for
HTTP”.

To illustrate:

  |
parent.xml
  |
www
  |---- index.html (file currently loaded)
  |---- sibling.xml
  |---- child-folder
  |       |---- child.xml

index.html is the currently loaded file in the WebView. From it, you
can't load parent.xml, sibling.xml nor child.xml using XHR according
to my tests.

The workaround is implementing CB-10109

  was:
mobile-spec failure in XMLHttpRequest.spec.4 is a known WKWebView issue, where 
CORS is now respected and cannot load files from file:// urls, only http*:// 
urls are allowed.

With CSP off to rule things out:
XHR to yourself of course works, but doesn't really make sense for
real-world use. XHR to a sibling file, parent file, or any child file
results in the error ""Cross origin requests are only supported for
HTTP”.

To illustrate:

  |
parent.xml
  |
www
  |---- index.html (file currently loaded)
  |---- sibling.xml
  |---- child-folder
  |       |---- child.xml

index.html is the currently loaded file in the WebView. From it, you
can't load parent.xml, sibling.xml nor child.xml using XHR according
to my tests.


> Local file:// url XmlHttpRequests are not allowed in WKWebViewEngine
> --------------------------------------------------------------------
>
>                 Key: CB-10143
>                 URL: https://issues.apache.org/jira/browse/CB-10143
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Plugin WKWebViewEngine
>            Reporter: Shazron Abdullah
>
> mobile-spec failure in XMLHttpRequest.spec.4 is a known WKWebView issue, 
> where CORS is now respected and cannot load files from file:// urls, only 
> http*:// urls are allowed.
> With CSP off to rule things out:
> XHR to yourself of course works, but doesn't really make sense for
> real-world use. XHR to a sibling file, parent file, or any child file
> results in the error ""Cross origin requests are only supported for
> HTTP”.
> To illustrate:
>   |
> parent.xml
>   |
> www
>   |---- index.html (file currently loaded)
>   |---- sibling.xml
>   |---- child-folder
>   |       |---- child.xml
> index.html is the currently loaded file in the WebView. From it, you
> can't load parent.xml, sibling.xml nor child.xml using XHR according
> to my tests.
> The workaround is implementing CB-10109



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to