While most apps would be based on a http: or https: origin domain, a Cordova app would be based on some kind of a file:// index URI path. I think both this difference and the potential consequences are not clear at all in the Cordova documentation. Examples of potential consequences include: