[CB-10143] Local file:// url XmlHttpRequests are not allowed in WKWebViewEngine

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: cordova-plugin-wkwebview-engine
• Labels: wkwebview-baked-in wkwebview-known-issues
• Assignee: Unassigned
• Reporter: Shazron Abdullah
• Created: 04/Dec/15 19:51
• Updated: 15/Dec/20 06:34
• Resolved: 25/Jun/20 11:00

Description

mobile-spec failure in XMLHttpRequest.spec.4 is a known WKWebView issue, where CORS is now respected and cannot load files from file:// urls, only http*:// urls are allowed.

With CSP off to rule things out:
XHR to yourself of course works, but doesn't really make sense for
real-world use. XHR to a sibling file, parent file, or any child file
results in the error ""Cross origin requests are only supported for
HTTP”.

To illustrate:

  |
parent.xml
  |
www
  |---- index.html (file currently loaded)
  |---- sibling.xml
  |---- child-folder
  |       |---- child.xml

index.html is the currently loaded file in the WebView. From it, you
can't load parent.xml, sibling.xml nor child.xml using XHR according
to my tests.

The workaround is implementing CB-10109

Issue Links

• depends upon: CB-10109 Allow WKWebView to proxy file:// url loading in XmlHttpRequest.open
• is depended upon by: CB-10145 HTMLImports is not working, rendering the webcomponents.js polyfill useless.
• is duplicated by: CB-10144 You can't make cross-origin XmlHttpRequests in WKWebView
• is duplicated by: CB-10532 jQuery.load() - Origin null is not allowed by Access-Control-Allow-Origin.
• is duplicated by: CB-11567 IOS 9.3.2 (iPhone 6s) can't load file://
• is duplicated by: CB-10109 Allow WKWebView to proxy file:// url loading in XmlHttpRequest.open