[
https://issues.apache.org/jira/browse/CB-2342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13569058#comment-13569058
]
Shazron Abdullah commented on CB-2342:
--------------------------------------
As commented by Andrew Grieve, CDVSound.m does not set the User-Agent, thus all
network connections from the plugin bypasses the whitelist.
How to set the User-Agent header is documented here in "Upgrading to 2.3.0":
https://github.com/apache/cordova-ios/blob/master/guides/Cordova%20Plugin%20Upgrade%20Guide.md
> Media API allows non-whitelisted audio to be played
> ---------------------------------------------------
>
> Key: CB-2342
> URL: https://issues.apache.org/jira/browse/CB-2342
> Project: Apache Cordova
> Issue Type: Bug
> Components: iOS
> Reporter: Shazron Abdullah
> Assignee: Shazron Abdullah
> Fix For: 2.5.0
>
>
> Repro steps:
> 1. Locate an audio file that can be played from a network location
> 2. Make sure that the location of the file from (1) is not in the whitelist
> config.xml
> 3. Play the audio file using the Media API
> Expected:
> Media file does not play, it is rejected by the whitelist.
> Actual:
> Media file plays, it is not rejected by the whitelist.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
