diff --git a/www/docs/en/11.x/guide/appdev/allowlist/index.md b/www/docs/en/11.x/guide/appdev/allowlist/index.md index 688a869702..3ae2bb3d3a 100644 --- a/www/docs/en/11.x/guide/appdev/allowlist/index.md +++ b/www/docs/en/11.x/guide/appdev/allowlist/index.md @@ -58,7 +58,7 @@ In `config.xml`, add `` tags, like this: ``` -Without any `` tags, only requests to `file://` URLs are allowed. However, the default Cordova application includes `` by default. +Without any `` tags, only requests to the location where the app content is served are allowed. Note: Allow List cannot block network redirects from a allow listed remote website (i.e. `http` or `https`) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP. diff --git a/www/docs/en/12.x/guide/appdev/allowlist/index.md b/www/docs/en/12.x/guide/appdev/allowlist/index.md index 4f930ee216..d3145d0108 100644 --- a/www/docs/en/12.x/guide/appdev/allowlist/index.md +++ b/www/docs/en/12.x/guide/appdev/allowlist/index.md @@ -58,7 +58,7 @@ In `config.xml`, add `` tags, like this: ``` -Without any `` tags, only requests to `file://` URLs are allowed. However, the default Cordova application includes `` by default. +Without any `` tags, only requests to the location where the app content is served are allowed. Note: Allow List cannot block network redirects from a allow listed remote website (i.e. `http` or `https`) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP. diff --git a/www/docs/en/dev/guide/appdev/allowlist/index.md b/www/docs/en/dev/guide/appdev/allowlist/index.md index 4f930ee216..d3145d0108 100644 --- a/www/docs/en/dev/guide/appdev/allowlist/index.md +++ b/www/docs/en/dev/guide/appdev/allowlist/index.md @@ -58,7 +58,7 @@ In `config.xml`, add `` tags, like this: ``` -Without any `` tags, only requests to `file://` URLs are allowed. However, the default Cordova application includes `` by default. +Without any `` tags, only requests to the location where the app content is served are allowed. Note: Allow List cannot block network redirects from a allow listed remote website (i.e. `http` or `https`) to a non-allowlisted website. Use CSP rules to mitigate redirects to non-allowlisted websites for webviews that support CSP.