[CB-7747] Extract whitelist functionality into a plugin

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.0.0
• Component/s: cordova-android, cordova-ios
• Assignee: Ian Clelland
• Reporter: Ian Clelland
• Created: 09/Oct/14 14:56
• Updated: 23/Aug/18 07:08
• Resolved: 26/Mar/15 17:55

Description

Mailing list thread: http://markmail.org/message/6jqt5f3t4iio52td
Also @apache: https://mail-archives.apache.org/mod_mbox/cordova-dev/201407.mbox/%3CCADVgkyNN3EKT4xiRXJFbwMGFhsrVF3kHQRzd3exvb5nW7_GdfA%40mail.gmail.com%3E

Ideally the network policy is completely removed from Cordova core, and replaced with a small set of plugin hooks so that different kinds of policies can be implemented in different plugins. The current whitelist implementation can be an example plugin provided for backwards-compatibility.

It should also be possible, once this is removed, to control the webview's network policy with CSP, in most platforms.

Issue Links

• is related to: CB-8210 Prep cordova-android for CSP by removing eval()s