[CB-9568] Update whitelist plugin to allow all network access by default

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: cordova-plugin-whitelist
• Labels: cordova-ios-4.0.x

Environment

iOS

• Assignee: Shazron Abdullah
• Reporter: Shazron Abdullah
• Created: 27/Aug/15 21:17
• Updated: 23/Aug/18 07:09
• Resolved: 11/Sep/15 23:08

Description

Basically the default for the access tag, if it's not present is the wildcard "*"

It's as if this tag is there if not present:
<access origin="*" />

ML thread: http://markmail.org/message/j3kd4lug65jdiiba

From Carlos:

But we need better docs to explain the differences between legacy-whitelist
and whitelist

And more detailed explanation on how to create a proper config.xml that
works across the board for ios and android. What about windows?

Also to look on how to have a good config.xml in hello-world template,
since most users will start with this first and I would like to be secure
by default and they open. meaning rely on CSP, and only use config.xml for
x, y, z

Issue Links

• duplicates: CB-8374 Access origin/whitelist for iOS doesn't default to all if access element missing from config.xml
• is related to: CB-9648 Update docs for new whitelist