Giters

EddyVerbruggen / SSLCertificateChecker-PhoneGap-Plugin

:passport_control: Prevent Man in the Middle attacks with this Cordova plugin

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

iPhone checks fingerprint from last URL in inappbrowser instead of given URL

enayetn opened this issue · comments

commented

Hello,

I am seeing a strange issue on iPhone only, where iPad works as expected.

I utilize the inAppBrowser to enable external authentication through a server I do not check the fingerprint of. If the browser is closed before external login is completed, the subsequent SSL check in my app using the plugin utilizes the fingerprint returned from the last URL in the inAppBrowser instead of the URL I provided to it.

I have verified this by logging the URL I send into the plugin method (window.plugins.sslCertificateChecker.check) and also logged the fingerprint the plugin checks in SSLCertificateChecker.m

I do not see any open issues with interactions between the inappbrowser and this plugin, can you provide some clarity about my scenario?

Thanks,