But why is the meta csp tag required? Op do 9 apr. 2015 om 19:36 schreef Ian Clelland <iclell...@chromium.org>
> On Thu, Apr 9, 2015 at 1:26 PM, Treggiari, Leo <leo.treggi...@intel.com> > wrote: > > > Do the whitelist changes mean that current access origin entries in a > > config.xml file will be ignored the next time that a developer builds > > their project? If so, that will certainly surprise some developers. > > > > Yes, but it only surprises developers who: > - Blindly update just their cordova-android platform to a new major > release, and > - Don't read any of the docs or release notes. > > The solution for them is simple, and loudly spelled out in the docs (or it > should be) -- install the legacy whitelist plugin. It treats the config > tags exactly as previous versions of Cordova did. > > > > Or does this just impact newly created projects? > > > > Newly-created projects actually shouldn't see this -- by default, the > hello-world starter template includes the new whitelist plugin. > > Ian > > > > Thanks, > > Leo > > > > -----Original Message----- > > From: mmo...@google.com [mailto:mmo...@google.com] On Behalf Of Michal > > Mocny > > Sent: Thursday, April 09, 2015 9:54 AM > > To: dev > > Subject: Re: [Vote] 4.0.0 Android Release > > > > PR for Blogpost changes, hopefully making it a bit more obvious what the > > whitelist changes are: > > https://github.com/cordova/apache-blog-posts/pull/35 > > > > Possibly we want to link to a more in-depth guide and remove some of my > > notes (i.e. specifically what needs adding, which config.xml should look > > like). > > > > Question: some of the plugin links are to github, some to npm. Should we > > document how to add these plugins using the new npm plugin name format? > > > > On Thu, Apr 9, 2015 at 12:15 PM, Andrew Grieve <agri...@chromium.org> > > wrote: > > > > > Please review and vote on this 4.0.0 Android Release. > > > > > > Release issue: https://issues.apache.org/jira/browse/CB-8833 > > > > > > Repos ready to be released have been published to dist/dev: > > > https://dist.apache.org/repos/dist/dev/cordova/CB-8833 > > > > > > The package was published from its corresponding git tag: > > > cordova-android: 4.0.0 (f224b1f2d4) > > > > > > Note that you can test it out via: > > > > > > cordova platform add https://github.com/apache/ > cordova-android#4.0.0 > > > > > > Blog post to review is here: > > > > > > > > > > > > > > https://github.com/cordova/apache-blog-posts/blob/master/ > 2015-04-10-cordova-android-4.0.0.md > > > > > > Upon a successful vote I will upload the archive to dist/, publish it > to > > > NPM, and post the corresponding blog post. > > > > > > Voting guidelines: > > > > > https://github.com/apache/cordova-coho/blob/master/docs/ > release-voting.md > > > > > > Voting will go on for a minimum of 48 hours. > > > > > > I vote +1: > > > * Ran coho audit-license-headers over the relevant repos > > > * Ran coho check-license to ensure all dependencies and subdependencies > > > have Apache-compatible licenses > > > * Ran mobilespec and only expected failures were happening > > > * Verified contents of archive > > > > > >
