One of the great challenge for mobile developers is securing it. In case of Cordova based mobile applications, this challenge is more complex. Since, all the cordova based mobile applications are nothing but an website with index.html. The only difference here is that this website runs within your mobile and all the html pages are wrapped within native container of mobile platforms. Let's look at the some of the points to be taken care while securing your mobile application: Cordova Whitelist Plugin This helps in restricting the access from your application to external websites. It prevents attackers to get information about user by injecting their own javascript code into your application. By default access policy is set to allow access for all domains. <access origin="*" /> Change this to point only to your site <access origin="https://yoursite.com/" /> Transfer Data Using Https: Data transferred over http can be intercepted a...
Blog about html5 based mobile applications