How to disable in Android Webview, the WebSettings attributes "AllowFileAccess" in cordova-android ?

2018-12-04 Thread MALEYRIE Stephane (AIM Services)
Hello, After an Android security audit, we need to disable in the WebView, the WebSettings attributes "AllowFileAccess" because we don't use this feature that may introduce security issue. I'm developing an ionic3 application based on Cordova-android 6.4.0 The Webview initialisation code seems

Re: How to disable in Android Webview, the WebSettings attributes "AllowFileAccess" in cordova-android ?

2018-12-05 Thread MALEYRIE Stephane (AIM Services)
Hello all, Thanks for your answers. I understand that new features will be only available on master release, with no back port. I use cordova 6.4.0 because there is an issue with cordova-plugin-fcm on cordova-android 7.x : https://github.com/fechanique/cordova-plugin-fcm/issues/470 https://gith

[New Feature] Change WebSettings of the WebView by config file

2018-12-06 Thread MALEYRIE Stephane (AIM Services)
Hello, After a few questions about changing an attribute of the WebSettings of the WebView (setAllowFileAccess) here : https://lists.apache.org/thread.html/3b97152bf089423292ba039bc690d923e438c4f902c40c2714faff90@%3Cdev.cordova.apache.org%3E And : https://lists.apache.org/thread.html/1865cda074

RE: How to disable in Android Webview, the WebSettings attributes "AllowFileAccess" in cordova-android ?

2018-12-07 Thread MALEYRIE Stephane (AIM Services)
it does and when you might need to enable it. A lot of > apps would break if people just turned it on as "good security > practice" without understanding the implications. > > On Wed, Dec 5, 2018 at 7:57 AM MALEYRIE Stephane (AIM Services) > wrote: > > > > Hel

RE: [New Feature] Change WebSettings of the WebView by config file

2018-12-07 Thread MALEYRIE Stephane (AIM Services)
hat other use cases besides `setAllowFileAccess` do you see here? > > -J > > Am Do., 6. Dez. 2018 um 14:36 Uhr schrieb MALEYRIE Stephane (AIM > Services) : > > Hello, > > After a few questions about changing an attribute of the WebSettings > of the WebView (setAllowFil

RE: [New Feature] Change WebSettings of the WebView by config file

2018-12-10 Thread MALEYRIE Stephane (AIM Services)
Hello, To conclude, can you tell me the best way to ask the developement of this new feature ? Is it to create a github issue ? I'd like to post this, if you see somthing to change, please, let me know : Subject : [New Feature] Allow to change WebSettings of the WebView by config file, or at

RE: [New Feature] Change WebSettings of the WebView by config file

2018-12-12 Thread MALEYRIE Stephane (AIM Services)
; > > > Yes, to create a GitHub issue is the correct way to suggest a feature. > > Please include a link to the lists.apache.org of this thread for the > > related discussion. > > > > -J > > Am Mo., 10. Dez. 2018 um 17:18 Uhr schrieb MALEYRIE Stephane (AIM

RE: [New Feature] Change WebSettings of the WebView by config file

2018-12-13 Thread MALEYRIE Stephane (AIM Services)
t need this big change. > > (Sorry to be pedantic here, but it doesn't make a lot of sense to discuss > feature A in a thread about feature B) > > -J > > Am Mi., 12. Dez. 2018 um 16:28 Uhr schrieb MALEYRIE Stephane (AIM Services) > : > > So, is anybody is inter