[CB-11440] iOS: Remove default: disabled NSAppTransportSecurity - soon required by Apple

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: cordova-ios@5.0.0
• Component/s: cordova-ios
• Labels: backlog iOS triaged

Environment

cordova-ios 4.1.1

• Assignee: Shazron Abdullah
• Reporter: Michael Schmidt
• Created: 15/Jun/16 04:47
• Updated: 06/Jun/22 23:32
• Resolved: 06/Jun/22 23:32

Description

iOS platform by default disables https:

    <key>NSAppTransportSecurity</key>
    <dict>
      <key>NSAllowsArbitraryLoads</key>
      <true/>
    </dict>

Apple soon requires HTTPS:

"Apple mandates App Store apps support ATS security protocol by 2017"
http://appleinsider.com/articles/16/06/14/apple-mandates-app-store-apps-support-ats-security-protocol-by-2017

--> remove this default from cordova ios platform

Issue Links

• is related to: CB-11936 Support four new App Transport Security (ATS) keys