Skip to content

Commit

Permalink
doc: update default description for <access> allowlist (#1366)
Browse files Browse the repository at this point in the history
  • Loading branch information
erisu authored Oct 23, 2024
1 parent d94123d commit b0f1c5a
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion www/docs/en/11.x/guide/appdev/allowlist/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ In `config.xml`, add `<access>` tags, like this:
<access origin="*" />
```

Without any `<access>` tags, only requests to `file://` URLs are allowed. However, the default Cordova application includes `<access origin="*">` by default.
Without any `<access>` tags, only requests to the location where the app content is served are allowed.

Note: Allow List cannot block network redirects from a allow listed remote website (i.e. `http` or `https`) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP.

Expand Down
2 changes: 1 addition & 1 deletion www/docs/en/12.x/guide/appdev/allowlist/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ In `config.xml`, add `<access>` tags, like this:
<access origin="*" />
```

Without any `<access>` tags, only requests to `file://` URLs are allowed. However, the default Cordova application includes `<access origin="*">` by default.
Without any `<access>` tags, only requests to the location where the app content is served are allowed.

Note: Allow List cannot block network redirects from a allow listed remote website (i.e. `http` or `https`) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP.

Expand Down
2 changes: 1 addition & 1 deletion www/docs/en/dev/guide/appdev/allowlist/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ In `config.xml`, add `<access>` tags, like this:
<access origin="*" />
```

Without any `<access>` tags, only requests to `file://` URLs are allowed. However, the default Cordova application includes `<access origin="*">` by default.
Without any `<access>` tags, only requests to the location where the app content is served are allowed.

Note: Allow List cannot block network redirects from a allow listed remote website (i.e. `http` or `https`) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP.

Expand Down

0 comments on commit b0f1c5a

Please sign in to comment.