Hey I just answered a question on StackOverflow about the whitelist and wildcards. Currently, on Android, doing this:
<access origin="*.googleapis.com" /> <access origin="*.gstatic.com" /> doesn't work for accessing subdomains, and you have to specify subdomains=true. This seems counterintutive to me. I'm wondering if this is the case on other platforms, and if this is consistent to the spec. Does anyone know? Joe
