search

blackberry / BB10-Webworks-Packager

The BB10 WebWorks Packager bundles the App content with the BB10 WebWorks Framework to create a BAR to run on the BB10 Device (or simulator)
27 stars 18 forks source link

<access> with no <feature> allows all features #92

Closed erhorim closed 12 years ago

erhorim commented 12 years ago

Description:

In config.xml, specify <access> but include no <feature> elements, ie. <content src="http://CI0000000094448.rim.net/erho/WebWorks/WhitelistTests/startPage.html"/>

<feature id="blackberry.app" required="true" version="1.0.0.0"/> <feature id="blackberry.system" required="true" version="1.0.0.0"/> <feature id="blackberry.identity" required="true" version="1.0.0.0"/> <feature id="blackberry.invoke" required="true" version="1.0.0.0"/>

<access uri="http://ci0000000094448.rim.net" subdomains="true"></access>

Launch app, and notice all APIs above are functional even though none is whitelisted.

Build: http://mac-ci:9000/job/BB10-Webworks-Framework-next-fix-15-forth-time-event-registration/1/ Attachment: https://github.com/downloads/blackberry/BB10-Webworks-Packager/GHIPkgr92.zip

erhorim commented 12 years ago

Defect fixed by blackberry-webworks/BB10-Webworks-Packager#16