Re: Implications of disabling ATS?
Re: Implications of disabling ATS?
- Subject: Re: Implications of disabling ATS?
- From: Jens Alfke <email@hidden>
- Date: Wed, 30 Sep 2015 09:17:16 -0700
> On Sep 30, 2015, at 7:06 AM, Alex Hall <email@hidden> wrote:
>
> However, before I go doing that, does anyone know of a better way? Are there security implications I'm overlooking? I don't know what users will do with this web view, and yes, some may log into sites or give other sensitive data. The primary use case is to look at articles, videos, etc that are tweeted, though, and to do that I can't have ATS blocking everything. I'm not sure what the best course is here. Thanks.
You might want to use WKWebView instead, then, if all you need is a basic display of some Web content. Since it’s actually running in a separate process, your app won’t be the origin of the insecure HTTP loads, so you shouldn’t run into any issues with ATS.
—Jens
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden