On Thu, Apr 9, 2015 at 1:26 PM, Treggiari, Leo <leo.treggi...@intel.com> wrote:
> Do the whitelist changes mean that current access origin entries in a > config.xml file will be ignored the next time that a developer builds > their project? If so, that will certainly surprise some developers. > Yes, but it only surprises developers who: - Blindly update just their cordova-android platform to a new major release, and - Don't read any of the docs or release notes. The solution for them is simple, and loudly spelled out in the docs (or it should be) -- install the legacy whitelist plugin. It treats the config tags exactly as previous versions of Cordova did. > Or does this just impact newly created projects? > Newly-created projects actually shouldn't see this -- by default, the hello-world starter template includes the new whitelist plugin. Ian > Thanks, > Leo > > -----Original Message----- > From: mmo...@google.com [mailto:mmo...@google.com] On Behalf Of Michal > Mocny > Sent: Thursday, April 09, 2015 9:54 AM > To: dev > Subject: Re: [Vote] 4.0.0 Android Release > > PR for Blogpost changes, hopefully making it a bit more obvious what the > whitelist changes are: > https://github.com/cordova/apache-blog-posts/pull/35 > > Possibly we want to link to a more in-depth guide and remove some of my > notes (i.e. specifically what needs adding, which config.xml should look > like). > > Question: some of the plugin links are to github, some to npm. Should we > document how to add these plugins using the new npm plugin name format? > > On Thu, Apr 9, 2015 at 12:15 PM, Andrew Grieve <agri...@chromium.org> > wrote: > > > Please review and vote on this 4.0.0 Android Release. > > > > Release issue: https://issues.apache.org/jira/browse/CB-8833 > > > > Repos ready to be released have been published to dist/dev: > > https://dist.apache.org/repos/dist/dev/cordova/CB-8833 > > > > The package was published from its corresponding git tag: > > cordova-android: 4.0.0 (f224b1f2d4) > > > > Note that you can test it out via: > > > > cordova platform add https://github.com/apache/cordova-android#4.0.0 > > > > Blog post to review is here: > > > > > > > > > https://github.com/cordova/apache-blog-posts/blob/master/2015-04-10-cordova-android-4.0.0.md > > > > Upon a successful vote I will upload the archive to dist/, publish it to > > NPM, and post the corresponding blog post. > > > > Voting guidelines: > > > https://github.com/apache/cordova-coho/blob/master/docs/release-voting.md > > > > Voting will go on for a minimum of 48 hours. > > > > I vote +1: > > * Ran coho audit-license-headers over the relevant repos > > * Ran coho check-license to ensure all dependencies and subdependencies > > have Apache-compatible licenses > > * Ran mobilespec and only expected failures were happening > > * Verified contents of archive > > >
