> Googling "setAllowFileAccess security issue" show many results...
If your follow up email is about this, then you are posting/asking in the wrong email thread. This one here was about "Change WebSettings of the WebView by config file". Allowing setAllowFileAccess to be configurable can be done with a one-off-feature and doesn't need this big change. (Sorry to be pedantic here, but it doesn't make a lot of sense to discuss feature A in a thread about feature B) -J Am Mi., 12. Dez. 2018 um 16:28 Uhr schrieb MALEYRIE Stephane (AIM Services) <prestataire.stephane.maley...@ca-titres.fr>: > So, is anybody is interested with this feature ? > > Googling "setAllowFileAccess security issue" show many results... > > It may interst other people... > > > I told them to send the mail first to discuss the new feature, nobody > has said anything about if we want it or not. > > I think we should agree before any issue is created. > > > El lun., 10 dic. 2018 a las 17:54, Chris Brody (<chris.br...@gmail.com>) > > escribió: > > > And you can find Cordova email archive in: > > https://lists.apache.org/list.html?dev@cordova.apache.org > > On Mon, Dec 10, 2018 at 11:45 AM Jan Piotrowski <piotrow...@gmail.com> > > wrote: > > > > > > Yes, to create a GitHub issue is the correct way to suggest a feature. > > > Please include a link to the lists.apache.org of this thread for the > > > related discussion. > > > > > > -J > > > Am Mo., 10. Dez. 2018 um 17:18 Uhr schrieb MALEYRIE Stephane (AIM > > > Services) <prestataire.stephane.maley...@ca-titres.fr>: > > > > > > > > Hello, > > > > > > > > To conclude, can you tell me the best way to ask the developement > > > > of > > this new feature ? > > > > Is it to create a github issue ? > > > > > > > > I'd like to post this, if you see somthing to change, please, let > > > > me > > know : > > > > > > > > Subject : > > > > [New Feature] Allow to change WebSettings of the WebView by config > > file, or at least, the allowFileAccess attributes > > > > > > > > Message : > > > > Hello, > > > > > > > > Is it possible to develop a new feature, to allow changing > > > > WebSettings > > of the WebView by config file, or at least, allowFileAccess attributes > > > > > > > > Currently, the only way is to hard code settings config here : > > https://github.com/apache/cordova-android/blob/6.4.x/framework/src/org > > /apache/cordova/engine/SystemWebViewEngine.java#L152 > > > > > > > > It would be usefull if we can configure any settings of > > > > WebSettings > > class : > > https://developer.android.com/reference/android/webkit/WebSettings > > > > Maybe by using preference in config.xml ? > > > > > > > > Thanks. > > > > > > > > Stéphane > > > > > > > > Related mails : > > > > > > https://lists.apache.org/thread.html/5a6cfdb0795655ed8d8d411e1ad2a5440 > > 7094ba54af7dd11bb05c7b2@%3Cdev.cordova.apache.org%3E > > > > > > > > -------------- > > > > > > > > Thanks again > > > > > > > > > > > > > I think this should be possible with preference tags in the > > config.xml, we should be able to read them and set those values to > > true or false, being the default the current one so it's not a breaking > change. > > > > > > > > > El jue., 6 dic. 2018 a las 16:45, Jan Piotrowski (< > > piotrow...@gmail.com>) > > > > > escribió: > > > > > > > > > > I read through the other threads. [...] > > > > > > > > > > Please reply to questions from other threads in these threads > > > > > instead of interlinking two discussions that are about related, > > > > > but different things. Thanks. > > > > > > > > > > > > > > > > > > > > -J > > > > > > > > > > > > > > > Am Do., 6. Dez. 2018 um 16:16 Uhr schrieb Chris Brody < > > > > > chris.br...@gmail.com>: > > > > > > > > > > > > > After a few questions about changing an attribute of the > > > > > > > WebSettings > > > > > of the WebView (setAllowFileAccess) here : > > > > > > > https://lists.apache.org/thread.html/3b97152bf089423292ba039bc690d923e > > > > > 438c4f902c40c2714faff90@%3Cdev.cordova.apache.org%3E > > > > > > > And : > > > > > > > https://lists.apache.org/thread.html/1865cda074ad5d741bd19d01a56cc5b2b > > > > > 4ac6e2a599d31b34f89eed6@%3Cdev.cordova.apache.org%3E > > > > > > > (sorry for bad reply of my second mail who lost historic) > > > > > > > > > > > > I read through the other threads. The two problems right now > > > > > > are that cordova-plugin-fcm does not work with > > > > > > cordova-android@7 and > > you > > > > > > need to do settings.setAllowFileAccess(false). > > > > > > > > > > > > I think you are right to maintain a private fork of > > > > > > cordova-android@6 for now. I recommend that you guys watch the > > > > > > issues and updates on our cordova-android project for anything > > > > > > important. There were npm security audit issues on some old > > > > > > dependencies, which we fixed in cordova-android@7. > > > > > > > > > > > > > I'd like to ask if it is possible to develop a new feature, > > > > > > > to allow > > > > > changing WebSettings of the WebView by config file. > > > > > > > > > > > > That should be possible. I am personally not so familiar with > > > > > > the configuration part, would need some time to figure out how > > > > > > we could do this. I would favor a process of identifying the > > > > > > use cases > > before > > > > > > going deeper, as Jan asked. > > > > > > > > > > > > > > -------------------------------------------------------------------- > > > > > > - To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org > > > > > > For additional commands, e-mail: dev-h...@cordova.apache.org > > > > > > > > > > > > > > > > ---------------------------------------------------------------- > > > > > ----- To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org > > > > > For additional commands, e-mail: dev-h...@cordova.apache.org > > > > > > > > > > > > > > > > > > ------------------------------------------------------------------ > > > > --- To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org > > > > For additional commands, e-mail: dev-h...@cordova.apache.org > > > > > > -------------------------------------------------------------------- > > > - To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org > > > For additional commands, e-mail: dev-h...@cordova.apache.org > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org > > For additional commands, e-mail: dev-h...@cordova.apache.org > > > > >
