iOS Cordova App opens HTTP and HTTPS URLs on Secure Web Browser

[Raúl Zamora]

Hi,

 

I developed a Cordova app for iOS which simply loads a remote URL. When I test it directly on a device, it works like expected: URL is loaded in the app webview.

Notwithstanding, after the XenMobile administration team wraps and distribute it to devices, when I open the app via Secure Hub, it doesn't load the remote URL in the webview. It opens Secure Web browser and the remote URL is loaded on it.

 

In my opinion this may be caused by applied policies while building MDX file, but I'm not an expert. ¿Could someone tell me if I'm right and what policies should the administration team check? 

 

Thank you in advance

[Kausar Tasneem]

10 hours ago, Raúl Zamora said:

Hi,

 

I developed a Cordova app for iOS which simply loads a remote URL. When I test it directly on a device, it works like expected: URL is loaded in the app webview.

Notwithstanding, after the XenMobile administration team wraps and distribute it to devices, when I open the app via Secure Hub, it doesn't load the remote URL in the webview. It opens Secure Web browser and the remote URL is loaded on it.

 

In my opinion this may be caused by applied policies while building MDX file, but I'm not an expert. ¿Could someone tell me if I'm right and what policies should the administration team check? 

 

Thank you in advance

Hello,

 

How the app interacts or loads depends on the MDX policies App interaction section after the app is wrapped by MDX Toolkit. 

 

Can you please check the MDX policies, may be attach a screenshot and I can help you with it. 

 

Regards,

Kausar

[Alex Rubio]

It shows you have access to network as blocked.  You should set to unrestricted or tunneled if you want to use the mvpn.

[Raúl Zamora]

Hello,

 

I attach screenshots that the XenMobile team has just sent me and the policy_metadata.xml inside the MDX file. I've compaired it with other xml from a Cordova app that is working fine. The main difference is that the second one hasn't policies of the Security_AppInteraction_OutboundURL category. The admin team says that they don't know why policies are different in both MDX files, because they allways use default settings. 

 

Do you know why this could be happening? Could it be because the new app use a very recent version of Apache Cordova?

 

And finally, if you could tell me what policies we have to update, it would be a great help.

 

Regards

policy_metadata.xml

[Kausar Tasneem]

Hello ,

 

I don't have much knowledge on Apache Cordova. However, if the previous version has been wrapped with same toolkit and doesn't have some policies and a new app has , then it should be that the ipa/apk was inculcated with a policy.

 

Usually, the App interaction for Document Exchange should be set to UNRESTRICTED if you want to open any wrapped app's doc/file into unwrapped app. If set to RESTRICTED, it opens with any XenMobile wrapped app available like SecureWeb in your case. 

 

However, for the Security_AppInteraction_OutboundURL policy, you need to check with app development team to see how is it there in this version , was it added or is it because of new Apache version and check if the old ipa was having older version of Apache Cordova. Also what if this app uses the previous version of Apache Cordova ? Does that make any difference ?

 

-Kausar

[Raúl Zamora]

Thank you Alex. That may be the origin of the problem. I will check it tomorrow with the team that creates MDX. Do you think that only changing that police the URL will be loaded on app webview and not will be redirected to Secure Web? Or App Interaction Policies could be interfeeing too? 

 

Edit: They say that they tested with tunneled access network and it still opens URL on Secure Web.

[Raúl Zamora]

One more thing. The XenMobile admin team has just told me that if they upload the .ipa directly to XenMobile without wrapping, when they try launch the app, Secure Hub shows a message asking for install Citrix Secure Web. So they say that our app is requiring Citrix Secure Web and it isn't a problem with MDX policies... Do you know why Secure Hub shows this message? The app loads perfectly when we install it directly to a device.

 

[Raúl Zamora]

New update:

 

We did a test removing ^http:=ctxmobilebrowser and ^https:=ctxmobilebrowser from the politicie of the attached image. The result is that now, the URL is not opened on Secure Web browser, but the app webview doesn't load it  yet. 

 

[David Levêque]

Hello,

 

We are experiencing exactly the same problem. Have you been able to fix it?

Thank you in advance for your help.

[Essa Alblooshi]

On 7/10/2018 at 11:15 AM, Raúl Zamora said:

New update:

 

We did a test removing ^http:=ctxmobilebrowser and ^https:=ctxmobilebrowser from the politicie of the attached image. The result is that now, the URL is not opened on Secure Web browser, but the app webview doesn't load it  yet. 

 

 

On 1/21/2020 at 3:29 PM, David Levêque said:

Hello,

 

We are experiencing exactly the same problem. Have you been able to fix it?

Thank you in advance for your help.

 

To allow Cordova apps in opening URL within the app browser, you need to remove the redirection to Secure Web in Allowed URLs setting. Replace "^http:=ctxmobilebrowser, ^https:=ctxmobilebrowser" with "^http:,^https:". It will allow the app to process http & https requests without redirection to Secure Web.