Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
cordova-plugin-webpack
Advanced tools
This plugin integrates webpack into your Cordova workflow.
Module bundlers such as webpack are essential for SPA (Single Page Application) development. Unfortunately, the Cordova workflow does not integrate webpack as a standard feature.
Simply install this plugin to easily integrate webpack into your Cordova workflow.
$ cordova plugin add cordova-plugin-webpack
$ cordova { prepare | platform add | build | run } [<platform> [...]]
[-- [--webpackConfig <webpackConfig> | --livereload]]
Option | Description | Default | Aliases |
---|---|---|---|
--webpackConfig | Path to a webpack configuration file | webpack.config.js or webpackfile.js in your project root directory. | -w |
--livereload | Enables LiveReload (HMR) | false | -l |
Before preparing your Cordova app, build scripts by webpack.
$ cordova prepare
$ cordova build -- --webpackConfig path/to/dir/webpack.config.js
After preparing your Cordova app, run LiveReload by Webpack Dev Server.
$ cordova prepare -- --livereload
$ cordova run -- -w path/to/dir/webpack.config.babel.js -l
Create a webpack configuration file (webpack.config.js
) in your project root folder
const path = require('path');
module.exports = {
mode: 'development',
entry: './src/index.js',
output: {
path: path.resolve(__dirname, 'www'),
filename: 'index.bundle.js',
},
devtool: 'inline-source-map',
};
Execute the commands
$ cordova build
$ cordova run -- --livereload
Create a Cordova app
$ cordova create cordova-plugin-webpack-example cordova.plugin.webpack.example CordovaPluginWebpackExample
Add platforms
$ cd cordova-plugin-webpack-example
$ cordova platform add android ios
Create a JavaScript file (entry point)
$ mkdir src
$ mv www/js/index.js src/index.js
Create a webpack configuration file (webpack.config.js
) in your project root folder
const path = require('path');
module.exports = {
mode: 'development',
entry: './src/index.js',
output: {
path: path.resolve(__dirname, 'www'),
filename: 'index.bundle.js',
},
devtool: 'inline-source-map',
};
Fix a HTML file (www/index.html
)
- <script type="text/javascript" src="js/index.js"></script>
+ <script type="text/javascript" src="index.bundle.js"></script>
Execute the commands
$ cordova build
$ cordova run -- --livereload
NOTE
Starting with Android 9 (API level 28), cleartext support is disabled by default. Therefore, LiveReload does not work on Android 9.0 and higher devices and emulators. Also see this issue.
To resolve this, you must modify your config.xml
file to enable cleartext support.
Add xmlns:android="http://schemas.android.com/apk/res/android"
in widget
root element
<widget id="cordova.plugin.webpack.example" version="1.0.0" xmlns="http://www.w3.org/ns/widgets" xmlns:android="http://schemas.android.com/apk/res/android" xmlns:cdv="http://cordova.apache.org/ns/1.0">
Enable android:usesCleartextTraffic
attribute in application
element
<platform name="android">
<edit-config file="AndroidManifest.xml" mode="merge" target="/manifest/application">
<application android:usesCleartextTraffic="true" />
</edit-config>
</platform>
Basically, it works according to your webpack configuration file.
If you want to custom webpack configuration, modify your webpack.config.js
file.
...
module.exports = {
...
mode: 'production',
entry: './src/index.js',
output: {
path: path.resolve(__dirname, 'www'),
filename: 'bundle.js',
},
plugins: [
new HtmlWebpackPlugin(),
],
...
devServer: {
contentBase: path.join(__dirname, 'public'),
host: 'localhost',
port: '8000',
hot: false,
},
...
};
Option | Default |
---|---|
devServer.contentBase | www |
devServer.historyApiFallBack | true |
devServer.host | 0.0.0.0 |
devServer.port | 8080 |
devServer.watchContentBase | true |
devServer.hot | true |
For example, if you want page reloading (LiveReload) instead of hot module reloading (HMR), specify the devServer.hot
option as false
.
...
module.exports = {
...
devServer: {
hot: false,
},
...
};
Contributions are always welcome! Please read the contributing first.
FAQs
Cordova Webpack Plugin
The npm package cordova-plugin-webpack receives a total of 12 weekly downloads. As such, cordova-plugin-webpack popularity was classified as not popular.
We found that cordova-plugin-webpack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.