Does Android allow native apps to disable CORS security policies for http:// (not local/file) requests?
In my native app, a webview shows a remote html via http://, not on the local/file system. This seems to be CORS-restricted in the same way as within webbrowsers.
Worakround: A native-js bridge for ajax requests to cross-domains which do not have Access-Control-Allow-Origin: * is my quick'n'dirt solution. (jsonp or server-side proxy is not an option because cookie+ip of client are checked by the webservice.)
Can this policy be disabled for inapp webviews?
Please let me know, if there is a simple flag for allowing js to bypass this restriction which limits the "native" app's webview.
AFAIK this is not possible, and believe me, I've tried many ways.
The best you can do is override resource loading. See Intercept and override HTTP-requests from WebView