[CB-12145] Since Android 5 third party cookies cannot be accepted by the browser due to default policy settings

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Component/s: cordova-plugin-inappbrowser
• Labels: android cookies security

Environment

Android 5+

• Assignee: Unassigned
• Reporter: Tim Moxon
• Created: 14/Nov/16 20:21
• Updated: 16/Sep/18 17:56
• Resolved: 05/Oct/17 18:10

Description

Since Android Lollipop / version 5 the inappbrowser cannot accept third party cookies due to changes to the default policy from the OS. The main cordova platform now accepts them by default to handle various workflows in which they are necessitated, however the inappbrowser hasn't yet followed suit.

In my particular usage scenario this creates problems with an opened browser not being able to pass through an oauth flow to another site in the background.

I have a fix for this which I will commit now in association with this ticket.

Issue Links

• links to: GitHub Pull Request #198
• links to: GitHub Pull Request #198