Reputation: 21
I recently learned how to build a mobile application using Ionic and needed a backend so I decided to use the Backand framework. I am developing in Visual Studio and everything works great when run from the emulator, and all service calls work perfectly, however when I attempt to perform the same service (POST) operations from an Android Device I get the following error.
Refused to connect to 'https: //api.backand.com/1/objects/player/'; because it violates the following Content Security Policy directive: "default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval
I found a similar issue in which the solution was that I may need to reference the servers address in index.html 's meta tag
<meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https: //ssl.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *; connect-src https://api.backand.com:*">
This however crashes the application and now I have hit a dead end as to where I should go from here. I would be happy to provide any more information that may be necessary, any help would be greatly appreciated!
Thanks
Upvotes: 2
Views: 462
Reputation: 312
This is a guide on Cordova's whitelist and CSP policy: http://taco.visualstudio.com/en-us/docs/cordova-security-whitlists/. If you have further problems with this scenario, please email [email protected] with your questions.
Disclosure: I work on the Cordova team at MSFT
Upvotes: 3
Reputation: 5519
ensure you add cordova-whitelist-plugin after you add android platform to your application.
Order of commands have to be:
ionic platform add android
and after it
cordova plugin add cordova-plugin-inappbrowser
ionic plugin add https://github.com/apache/cordova-plugin-whitelist.git
if you change the order, ionic will install plugin only for current platform that is ios.
Upvotes: 2