Adding google.com to CSP and removing older one

apache · May 9, 2016 · ff9f2fa3acce67ccdb211d46ebb3a6d4213a7c5d · ff9f2fa
1 parent f642d54
commit ff9f2fa3acce67ccdb211d46ebb3a6d4213a7c5d
Showing 3 changed files with 2 additions and 4 deletions.
diff --git a/config.xml b/config.xml
@@ -25,7 +25,6 @@
     </description>
 
     <access origin="http://audio.ibeat.org" />
-    <access origin="http://cordova-filetransfer.jitsu.com" />
     <access origin="http://whatheaders.com" />
     <access origin="http://*.apache.org" />
     <access origin="https://*.apache.org" />
@@ -37,7 +36,6 @@
     <access origin="httpssss://example.com" />
 
     <allow-navigation href="http://audio.ibeat.org" />
-    <allow-navigation href="http://cordova-filetransfer.jitsu.com" />
     <allow-navigation href="http://whatheaders.com" />
     <allow-navigation href="http://*.apache.org" />
     <allow-navigation href="https://*.apache.org" />

diff --git a/cordova-plugin-mobilespec-tests/tests/localXHR.tests.js b/cordova-plugin-mobilespec-tests/tests/localXHR.tests.js
@@ -100,7 +100,7 @@ exports.defineAutoTests = function () {
         });
 
         it("XMLHttpRequest.spec.9 calls onload from successful http get", function (done) {
-            createXHR("http://google.com", true, done, errorHandler.onError.bind(null, done));
+            createXHR("http://www.google.com", true, done, errorHandler.onError.bind(null, done));
         });
 
         it("XMLHttpRequest.spec.3 should be able to load the current page", function (done) {

diff --git a/www/csp-incl.js b/www/csp-incl.js
@@ -51,7 +51,7 @@ if (!window._disableCSP) {
         case 'ios':
         case 'windows':
             cspMetaContent = 'default-src \'self\' https://ssl.gstatic.com/accessibility/javascript/android/;' +
-                            ' connect-src \'self\' http://cordova-filetransfer.jitsu.com;' +
+                            ' connect-src \'self\' http://www.google.com;' +
                             ' media-src \'self\' http://cordova.apache.org/downloads/ https://cordova.apache.org/downloads/;' +
                             ' frame-src \'self\' http://stealbridgesecret.test/ data: gap:;' +
                             ' img-src \'self\' data: cdvfile:;' +