[CB-8374] Access origin/whitelist for iOS doesn't default to all if access element missing from config.xml

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 3.7.0
• Component/s: cordova-ios

Environment

ios

• Assignee: Unassigned
• Reporter: Holly Schinsky
• Created: 28/Jan/15 22:14
• Updated: 23/Aug/18 07:07
• Resolved: 01/Sep/15 21:49

Description

If the <access origin="*"/> element is left out of the config.xml, the default does not allow all URLs as it should, instead it is set only to the following in the CDVConfigParser.m class:

        [self.whitelistHosts addObject:@"file:///*"];
        [self.whitelistHosts addObject:@"content:///*"];
        [self.whitelistHosts addObject:@"data:///*"];

Issue Links

• is duplicated by: CB-9568 Update whitelist plugin to allow all network access by default