How to disable in Android Webview, the WebSettings attributes "AllowFileAccess" in cordova-android ?

2018-12-04 Thread MALEYRIE Stephane (AIM Services)
Hello, After an Android security audit, we need to disable in the WebView, the WebSettings attributes "AllowFileAccess" because we don't use this feature that may introduce security issue. I'm developing an ionic3 application based on Cordova-android 6.4.0 The Webview initialisation code seems

Re: How to disable in Android Webview, the WebSettings attributes "AllowFileAccess" in cordova-android ?

2018-12-04 Thread Jan Piotrowski
Hi Stéphane, there is a newer version of cordova-android available: 7.x.x - currently 7.1.4. That means that we, the volunteer development team, won't do any more updates to the 6.x branch. So even if we implement any new features here, they will only get released for 7.x. Any particular reason wh

Re: How to disable in Android Webview, the WebSettings attributes "AllowFileAccess" in cordova-android ?

2018-12-04 Thread julio cesar sanchez
This is not configurable at the moment, if you want it to be considered, create a new thread where people can talk about it and vote. But as Jan said, we won't back port it to previous versions, so in case people likes the idea and somebody send a PR that gets merged with the feature, it will only

Re: [PRs] "Deprecation and Archiving Policy"

2018-12-04 Thread Jan Piotrowski
Thank you for your reviews and approvals @raphinesse, @erisu and @Menardi. This is now all merged and available: https://cordova.apache.org/deprecation_policy.html https://github.com/apache/cordova-contribute/blob/master/deprecation.md After feedback from Jesse I also moved the list of deprecatio

[dev] Cordova-Android Gradle improvements?

2018-12-04 Thread Chris Brody
I think it should be possible for user-defined Gradle files to be configured outside the generated cordova-android project to avoid issues we have encountered such as changing project structure and cordova-android upgrades. While it would be possible for a user to make a custom plugin with a custom

Re: [dev] Cordova-Android Gradle improvements?

2018-12-04 Thread Darryl Pogue
I'm experimenting with refactoring the way Cordova's gradle files are set up. Partly to resolve issues around the availability of Cordova helper methods[1], the new app bundles features[2], Kotlin support[3], and to investigate options for making the setting of build-time variables (like min SDK ve

Re: [dev] Cordova-Android Gradle improvements?

2018-12-04 Thread Chris Brody
By "user-defined Gradle files" I meant what someone can put into build-extras.gradle. By supporting user-editable build-extras.gradle in the generated Android project we encounter some possible issues such as: * supporting project structure change, where we already encountered

Re: [dev] Cordova-Android Gradle improvements?

2018-12-04 Thread Jan Piotrowski
Aside: By definition WIP (Work in Progress) pull requests should not be reviewed. If someone ignores that, I think it is fair to dismiss all the reviews without further comment. -J Am Di., 4. Dez. 2018 um 19:16 Uhr schrieb Chris Brody : > > By "user-defined Gradle files" I meant what someone can p

Nightly build #931 for cordova has succeeded!

2018-12-04 Thread Apache Jenkins Server
Nightly build #931 for cordova has succeeded! The latest nightly has been published and you can try it out with 'npm i -g cordova@nightly' For details check build console at https://builds.apache.org/job/cordova-nightly/931/consoleFull - Jenkins for Apache Cordova -