breautek commented on issue #1534:
URL: https://github.com/apache/cordova-ios/issues/1534#issuecomment-2859851927

   This is standard behaviour for Safari **IF** the document is a cross-origin 
document which I'm guessing is the case here.
   
   If you're using the `file://` based strategy for the webview app host, then 
you're document will be considered cross-origin.
   
   If you use URL schemes, then all your source files that is bundled within 
the app (and loaded over the url scheme) will be considered same origin and you 
should get the behaviour that you'd expect.
   
   iOS defaults to `file://` strategy, mainly for legacy reasons. It is 
generally recommended to opt in to url schemes. To do this, specify a 
scheme/hostname preference:
   
   ```xml
   <platform name="ios">
       <preference name="scheme" value="app" />
       <preference name="hostname" value="localhost" />
   </platform>
   ```
   
   Note that the preferences should be inside an `ios` platform block, because 
android & ios cannot share the same scheme/hostname settings due to 
platform-specific limitations.
   
   Cordova Android defaults to use their equivalent URL scheme feature, namely 
because Google considers using file:// strategy as insecure and a potential 
vulnerability. It defaults to `https://localhost`, and it's not necessary to 
explicitly specify the scheme/hostname for android.
   
   Please let us know if using url schemes helps.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For additional commands, e-mail: issues-h...@cordova.apache.org

Reply via email to