You are right, sorry, i was focused on my problem.

Back to the thread subject : if anybody is interesting to Change WebSettings of 
the WebView by config file, just let me know.

Thanks

Stéphane

> > Googling "setAllowFileAccess security issue" show many results...
>
> If your follow up email is about this, then you are posting/asking in the 
> wrong email thread. This one here was about "Change WebSettings of the 
> WebView by config file".
> Allowing setAllowFileAccess to be configurable can be done with a 
> one-off-feature and doesn't need this big change.
>
> (Sorry to be pedantic here, but it doesn't make a lot of sense to discuss 
> feature A in a thread about feature B)
>
> -J
>
> Am Mi., 12. Dez. 2018 um 16:28 Uhr schrieb MALEYRIE Stephane (AIM Services)
> <prestataire.stephane.maley...@ca-titres.fr>:
>
> So, is anybody is interested with this feature ?
>
> Googling "setAllowFileAccess security issue" show many results...
>
> It may interst other people...
>
> > I told them to send the mail first to discuss the new feature, 
> > nobody
> has said anything about if we want it or not.
> > I think we should agree before any issue is created.
>
> > El lun., 10 dic. 2018 a las 17:54, Chris Brody 
> > (<chris.br...@gmail.com>)
> > escribió:
>
> > And you can find Cordova email archive in:
> > https://lists.apache.org/list.html?dev@cordova.apache.org
> > On Mon, Dec 10, 2018 at 11:45 AM Jan Piotrowski 
> > <piotrow...@gmail.com>
> > wrote:
> > >
> > > Yes, to create a GitHub issue is the correct way to suggest a feature.
> > > Please include a link to the lists.apache.org of this thread for 
> > > the related discussion.
> > >
> > > -J
> > > Am Mo., 10. Dez. 2018 um 17:18 Uhr schrieb MALEYRIE Stephane (AIM
> > > Services) <prestataire.stephane.maley...@ca-titres.fr>:
> > > >
> > > > Hello,
> > > >
> > > > To conclude, can you tell me the best way to ask the 
> > > > developement of
> > this new feature ?
> > > > Is it to create a github issue ?
> > > >
> > > > I'd like to post this, if you see somthing to change, please, 
> > > > let me
> > know :
> > > >
> > > > Subject :
> > > > [New Feature] Allow to change WebSettings of the WebView by 
> > > > config
> > file, or at least, the allowFileAccess attributes
> > > >
> > > > Message :
> > > > Hello,
> > > >
> > > > Is it possible to develop a new feature, to allow changing 
> > > > WebSettings
> > of the WebView by config file, or at least, allowFileAccess 
> > attributes
> > > >
> > > > Currently, the only way is to hard code settings config here :
> > https://github.com/apache/cordova-android/blob/6.4.x/framework/src/o
> > rg
> > /apache/cordova/engine/SystemWebViewEngine.java#L152
> > > >
> > > > It would be usefull if we can configure any settings of 
> > > > WebSettings
> > class :
> > https://developer.android.com/reference/android/webkit/WebSettings
> > > > Maybe by using preference in config.xml ?
> > > >
> > > > Thanks.
> > > >
> > > > Stéphane
> > > >
> > > > Related mails :
> > > >
> > https://lists.apache.org/thread.html/5a6cfdb0795655ed8d8d411e1ad2a54
> > 40 7094ba54af7dd11bb05c7b2@%3Cdev.cordova.apache.org%3E
> > > >
> > > > --------------
> > > >
> > > > Thanks again
> > > >
> > > >
> > > > > I think this should be possible with preference tags in the
> > config.xml, we should be able to read them and set those values to 
> > true or false, being the default the current one so it's not a 
> > breaking
> change.
> > > >
> > > > > El jue., 6 dic. 2018 a las 16:45, Jan Piotrowski (<
> > piotrow...@gmail.com>)
> > > > > escribió:
> > > >
> > > > > > I read through the other threads. [...]
> > > > >
> > > > > Please reply to questions from other threads in these threads 
> > > > > instead of interlinking two discussions that are about 
> > > > > related, but different things. Thanks.
> > > > >
> > > > >
> > > > >
> > > > > -J
> > > > >
> > > > >
> > > > > Am Do., 6. Dez. 2018 um 16:16 Uhr schrieb Chris Brody <
> > > > > chris.br...@gmail.com>:
> > > > > >
> > > > > > > After a few questions about changing an attribute of the 
> > > > > > > WebSettings
> > > > > of the WebView (setAllowFileAccess) here :
> > > > >
> > https://lists.apache.org/thread.html/3b97152bf089423292ba039bc690d92
> > 3e
> > > > > 438c4f902c40c2714faff90@%3Cdev.cordova.apache.org%3E
> > > > > > > And :
> > > > >
> > https://lists.apache.org/thread.html/1865cda074ad5d741bd19d01a56cc5b
> > 2b
> > > > > 4ac6e2a599d31b34f89eed6@%3Cdev.cordova.apache.org%3E
> > > > > > > (sorry for bad reply of my second mail who lost historic)
> > > > > >
> > > > > > I read through the other threads. The two problems right now 
> > > > > > are that cordova-plugin-fcm does not work with
> > > > > > cordova-android@7 and
> > you
> > > > > > need to do settings.setAllowFileAccess(false).
> > > > > >
> > > > > > I think you are right to maintain a private fork of
> > > > > > cordova-android@6 for now. I recommend that you guys watch 
> > > > > > the issues and updates on our cordova-android project for 
> > > > > > anything important. There were npm security audit issues on 
> > > > > > some old dependencies, which we fixed in cordova-android@7.
> > > > > >
> > > > > > > I'd like to ask if it is possible to develop a new 
> > > > > > > feature, to allow
> > > > > changing WebSettings of the WebView by config file.
> > > > > >
> > > > > > That should be possible. I am personally not so familiar 
> > > > > > with the configuration part, would need some time to figure 
> > > > > > out how we could do this. I would favor a process of 
> > > > > > identifying the use cases
> > before
> > > > > > going deeper, as Jan asked.
> > > > > >
> > > > > >
> > --------------------------------------------------------------------
> > > > > > - To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org
> > > > > > For additional commands, e-mail: dev-h...@cordova.apache.org
> > > > > >
> > > > >
> > > > > --------------------------------------------------------------
> > > > > --
> > > > > ----- To unsubscribe, e-mail: 
> > > > > dev-unsubscr...@cordova.apache.org
> > > > > For additional commands, e-mail: dev-h...@cordova.apache.org
> > > > >
> > > > >
> > > >
> > > > ----------------------------------------------------------------
> > > > --
> > > > --- To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org
> > > > For additional commands, e-mail: dev-h...@cordova.apache.org
> > >
> > > ------------------------------------------------------------------
> > > --
> > > - To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org
> > > For additional commands, e-mail: dev-h...@cordova.apache.org
> > >
> >
> > --------------------------------------------------------------------
> > - To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org
> > For additional commands, e-mail: dev-h...@cordova.apache.org
> >
> >
>

Reply via email to