
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@totalpave/cordova-plugin-wkwebview-engine
Advanced tools
The official Apache Cordova WKWebView Engine Plugin
AppVeyor | Travis CI |
---|---|
This plugin makes Cordova
use the WKWebView
component instead of the default UIWebView
component, and is installable only on a system with the iOS 9.0 SDK.
In iOS 9, Apple has fixed the issue present through iOS 8 where you cannot load locale files using file://, and must resort to using a local webserver. However, you are still not able to use XHR from the file:// protocol without CORS enabled on your server.
This plugin needs cordova-ios >4.0.0.
To install the current release:
cordova create wkwvtest my.project.id wkwvtest
cd wkwvtest
cordova platform add ios@4
cordova plugin add cordova-plugin-wkwebview-engine
To test the development version:
cordova create wkwvtest my.project.id wkwvtest
cd wkwvtest
cordova platform add https://github.com/apache/cordova-ios.git#master
cordova plugin add https://github.com/apache/cordova-plugin-wkwebview-engine.git#master
You also must have at least Xcode 7 (iOS 9 SDK) installed. Check your Xcode version by running:
xcode-select --print-path
WKWebView may not fully launch (the deviceready event may not fire) unless if the following is included in config.xml. This should already be installed by Cordova in your platform config.xml when the plugin is installed.
<feature name="CDVWKWebViewEngine">
<param name="ios-package" value="CDVWKWebViewEngine" />
</feature>
<preference name="CordovaWebViewEngine" value="CDVWKWebViewEngine" />
This plugin creates a shared WKProcessPool
which ensures the cookie sharing happens correctly across WKWebView
instances. CDVWKProcessPoolFactory
class can be used to obtain the shared WKProcessPool
instance if app creates WKWebView
outside of this plugin.
On an iOS 8 system, Apache Cordova during runtime will switch to using the UIWebView engine instead of using this plugin. If you want to use WKWebView on both iOS 8 and iOS 9 platforms, you will have to resort to using a local webserver.
We have an experimental plugin that does this. You would use that plugin instead of this one.
Starting with cordova-cli 5.4.0, it will support automatic conversion of the <access> tags in config.xml to Application Transport Security ATS directives.
Upgrade to at least version 5.4.0 of the cordova-cli to use this new functionality.
In order to allow swiping backwards and forwards in browser history like Safari does, you can set the following preference in your config.xml
:
<preference name="AllowBackForwardNavigationGestures" value="true" />
You can also set this preference dynamically from JavaScript:
window.WkWebView.allowsBackForwardNavigationGestures(true)
window.WkWebView.allowsBackForwardNavigationGestures(false)
In order to disable preview popups when hard pressing links in iOS, you can set the following preference in your config.xml
:
<preference name="Allow3DTouchLinkPreview" value="false" />
If you are upgrading from UIWebView, please note the limitations of using WKWebView as outlined in our issue tracker.
The AllowInlineMediaPlayback
preference will not work because of this Apple bug. This bug has been fixed in iOS 10.
FAQs
The official Apache Cordova WKWebView Engine Plugin
We found that @totalpave/cordova-plugin-wkwebview-engine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.