Re: CSP ignored when using remote content

2015-05-23 Thread Pär
s-Control-Allow-Origin' allowing XHR to be allowed or not. > > You can use network inspection tools to see the request/response to see > > what's happening in your case and understand the failure. > > > > > > Thanks, > > > Nikhil > > > > > > >

Re: CSP ignored when using remote content

2015-05-23 Thread julio cesar sanchez
etwork inspection tools to see the request/response to see > > what's happening in your case and understand the failure. > > > > > > Thanks, > > > Nikhil > > > > > > > > > -Original Message- > > > From: Pär [mailto:

Re: CSP ignored when using remote content

2015-05-23 Thread Pär
use network inspection tools to see the request/response to see > what's happening in your case and understand the failure. > > > > Thanks, > > Nikhil > > > > > > -----Original Message- > > From: Pär [mailto:p.majh...@gmail.com] > > Sent: Thursday,

Re: CSP ignored when using remote content

2015-05-22 Thread Shazron
gt; > > -Original Message- > From: Pär [mailto:p.majh...@gmail.com] > Sent: Thursday, May 21, 2015 6:24 PM > To: dev@cordova.apache.org > Subject: Re: CSP ignored when using remote content > > Thanks for the reply. Yes, the CSP rules are defined by the page that is > loaded,

RE: CSP ignored when using remote content

2015-05-22 Thread Nikhil Khandelwal
-Original Message- From: Pär [mailto:p.majh...@gmail.com] Sent: Thursday, May 21, 2015 6:24 PM To: dev@cordova.apache.org Subject: Re: CSP ignored when using remote content Thanks for the reply. Yes, the CSP rules are defined by the page that is loaded, wherever that is. The thing is that th

Re: CSP ignored when using remote content

2015-05-21 Thread Pär
Thanks for the reply. Yes, the CSP rules are defined by the page that is loaded, wherever that is. The thing is that the behavior when loading that page from a remote server is different from the behavior when loading the page locally, even though its the exact same page. I have and CSP "default-

Re: CSP ignored when using remote content

2015-05-21 Thread Jesse
This is the intended behavior. The csp rules are defined by the page that is loaded, wherever it is. Pointing content.src to a remote server basically means, ignore anything that is in www/index.html. @purplecabbage risingj.com On Thu, May 21, 2015 at 2:16 PM, Pär wrote: > When using a remote