Skip to content

Instantly share code, notes, and snippets.

@flpwgr

flpwgr/030_modify_plist.sh

Created September 15, 2015 14:44
Show Gist options
  • Save flpwgr/6e73a3d52607288f64b5 to your computer and use it in GitHub Desktop.
Save flpwgr/6e73a3d52607288f64b5 to your computer and use it in GitHub Desktop.
Download ZIP
Cordova Hook for App Transport Security iOS 9
Raw
030_modify_plist.sh
#!/bin/bash
PLIST=platforms/ios/*/*-Info.plist
cat << EOF |
Add :NSAppTransportSecurity dict
Add :NSAppTransportSecurity:NSAllowsArbitraryLoads bool YES
EOF
while read line
do
/usr/libexec/PlistBuddy -c "$line" $PLIST
done
true
@nextrealm
Copy link

Change:

Add :NSAppTransportSecurity dict
Add :NSAppTransportSecurity:NSAllowsArbitraryLoads bool YES

To:

Add :NSAppTransportSecurity dict
Add :NSAppTransportSecurity:NSExceptionDomains dict
Add :NSAppTransportSecurity:NSExceptionDomains:example.com dict
Add :NSAppTransportSecurity:NSExceptionDomains:example.com:NSIncludesSubdomains bool YES
Add :NSAppTransportSecurity:NSExceptionDomains:example.com:NSExceptionAllowsInsecureHTTPLoads bool YES

Where example.com is the domain you want to whitelist

@digitalcatnip
Copy link

My app will be allowing users to enter a domain to connect to my custom Node.js server they would install. Is that a good exception to the App Transport Security feature? I have custom logic to verify they are connected to a port running my service and not some random HTTP apache host.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment