[ 
https://issues.apache.org/jira/browse/CB-12145?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16163151#comment-16163151
 ] 

ASF GitHub Bot commented on CB-12145:
-------------------------------------

Github user shaggy8871 commented on the issue:

    https://github.com/apache/cordova-plugin-inappbrowser/pull/198
  
    This patch works well when applied manually. To enable, pass 
`acceptThirdPartyCookies` as an option to `open()`:
    
    ```
    cordova.InAppBrowser.open('<domain>', '_blank', 
'acceptThirdPartyCookies=yes');
    ```


> Since Android 5 third party cookies cannot be accepted by the browser due to 
> default policy settings
> ----------------------------------------------------------------------------------------------------
>
>                 Key: CB-12145
>                 URL: https://issues.apache.org/jira/browse/CB-12145
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: cordova-plugin-inappbrowser
>         Environment: Android 5+
>            Reporter: Tim Moxon
>            Priority: Minor
>              Labels: android, cookies, security
>   Original Estimate: 2h
>  Remaining Estimate: 2h
>
> Since Android Lollipop / version 5 the inappbrowser cannot accept third party 
> cookies due to changes to the default policy from the OS. The main cordova 
> platform now accepts them by default to handle various workflows in which 
> they are necessitated, however the inappbrowser hasn't yet followed suit.
> In my particular usage scenario this creates problems with an opened browser 
> not being able to pass through an oauth flow to another site in the 
> background. 
> I have a fix for this which I will commit now in association with this ticket.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to