Installations
npm install @capacitor-mobi/cordova-plugin-inappbrowser
Releases
Unable to fetch releases
Developer
mobiliarmad
Developer Guide
Module System
Unable to determine the module system for this package.
Min. Node Version
Typescript Support
Yes
Node Version
14.16.0
NPM Version
7.13.0
Statistics
684 Commits
1 Watching
22 Branches
Updated on 26 May 2021
Languages
Objective-C (33.17%)
Java (32.07%)
JavaScript (30.6%)
HTML (2.72%)
CSS (1.44%)
Total Downloads
Cumulative downloads
Total Downloads
78,037
Last day
-45.4%
59
Compared to previous day
Last week
-5%
517
Compared to previous week
Last month
2.6%
2,558
Compared to previous month
Last year
40.3%
39,969
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
1
title: Inappbrowser description: Open an in-app browser window.
AppVeyor | Travis CI |
---|---|
cordova-plugin-inappbrowser
You can show helpful articles, videos, and web resources inside of your app. Users can view web pages without leaving your app.
To get a few ideas, check out the sample at the bottom of this page or go straight to the reference content.
This plugin provides a web browser view that displays when calling cordova.InAppBrowser.open()
.
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
window.open
The cordova.InAppBrowser.open()
function is defined to be a drop-in replacement
for the window.open()
function. Existing window.open()
calls can use the
InAppBrowser window, by replacing window.open:
window.open = cordova.InAppBrowser.open;
If you change the browsers window.open
function this way, it can have unintended side
effects (especially if this plugin is included only as a dependency of another
plugin).
The InAppBrowser window behaves like a standard web browser, and can't access Cordova APIs. For this reason, the InAppBrowser is recommended if you need to load third-party (untrusted) content, instead of loading that into the main Cordova webview. The InAppBrowser is not subject to the whitelist, nor is opening links in the system browser.
The InAppBrowser provides by default its own GUI controls for the user (back, forward, done).
Installation
cordova plugin add cordova-plugin-inappbrowser
If you want all page loads in your app to go through the InAppBrowser, you can
simply hook window.open
during initialization. For example:
document.addEventListener("deviceready", onDeviceReady, false);
function onDeviceReady() {
window.open = cordova.InAppBrowser.open;
}
Preferences
config.xml
- InAppBrowserStatusBarStyle [iOS only]: (string, options 'lightcontent', 'darkcontent' or 'default'. Defaults to 'default') set text color style for iOS. 'lightcontent' is intended for use on dark backgrounds. 'darkcontent' is only available since iOS 13 and intended for use on light backgrounds.
<preference name="InAppBrowserStatusBarStyle" value="lightcontent" />
cordova.InAppBrowser.open
Opens a URL in a new InAppBrowser
instance, the current browser
instance, or the system browser.
var ref = cordova.InAppBrowser.open(url, target, options);
-
ref: Reference to the
InAppBrowser
window when the target is set to'_blank'
. (InAppBrowser) -
url: The URL to load (String). Call
encodeURI()
on this if the URL contains Unicode characters. -
target: The target in which to load the URL, an optional parameter that defaults to
_self
. (String)_self
: Opens in the Cordova WebView if the URL is in the white list, otherwise it opens in theInAppBrowser
._blank
: Opens in theInAppBrowser
._system
: Opens in the system's web browser.
-
options: Options for the
InAppBrowser
. Optional, defaulting to:location=yes
. (String)The
options
string must not contain any blank space, and each feature's name/value pairs must be separated by a comma. Feature names are case insensitive.All platforms support:
- location: Set to
yes
orno
to turn theInAppBrowser
's location bar on or off.
Android supports these additional options:
- hidden: set to
yes
to create the browser and load the page, but not show it. The loadstop event fires when loading is complete. Omit or set tono
(default) to have the browser open and load normally. - beforeload: set to enable the
beforeload
event to modify which pages are actually loaded in the browser. Accepted values areget
to intercept only GET requests,post
to intercept on POST requests oryes
to intercept both GET & POST requests. Note that POST requests are not currently supported and will be ignored (if you setbeforeload=post
it will raise an error). - clearcache: set to
yes
to have the browser's cookie cache cleared before the new window is opened - clearsessioncache: set to
yes
to have the session cookie cache cleared before the new window is opened - closebuttoncaption: set to a string to use as the close button's caption instead of a X. Note that you need to localize this value yourself.
- closebuttoncolor: set to a valid hex color string, for example:
#00ff00
, and it will change the close button color from default, regardless of being a text or default X. Only has effect if user has location set toyes
. - footer: set to
yes
to show a close button in the footer similar to the iOS Done button. The close button will appear the same as for the header hence use closebuttoncaption and closebuttoncolor to set its properties. - footercolor: set to a valid hex color string, for example
#00ff00
or#CC00ff00
(#aarrggbb
) , and it will change the footer color from default. Only has effect if user has footer set toyes
. - hardwareback: set to
yes
to use the hardware back button to navigate backwards through theInAppBrowser
's history. If there is no previous page, theInAppBrowser
will close. The default value isyes
, so you must set it tono
if you want the back button to simply close the InAppBrowser. - hidenavigationbuttons: set to
yes
to hide the navigation buttons on the location toolbar, only has effect if user has location set toyes
. The default value isno
. - hideurlbar: set to
yes
to hide the url bar on the location toolbar, only has effect if user has location set toyes
. The default value isno
. - navigationbuttoncolor: set to a valid hex color string, for example:
#00ff00
, and it will change the color of both navigation buttons from default. Only has effect if user has location set toyes
and not hidenavigationbuttons set toyes
. - toolbarcolor: set to a valid hex color string, for example:
#00ff00
, and it will change the color the toolbar from default. Only has effect if user has location set toyes
. - lefttoright: Set to
yes
to swap positions of the navigation buttons and the close button. Specifically, navigation buttons go to the right and close button to the left. Default value isno
. - zoom: set to
yes
to show Android browser's zoom controls, set tono
to hide them. Default value isyes
. - mediaPlaybackRequiresUserAction: Set to
yes
to prevent HTML5 audio or video from autoplaying (defaults tono
). - shouldPauseOnSuspend: Set to
yes
to make InAppBrowser WebView to pause/resume with the app to stop background audio (this may be required to avoid Google Play issues like described in CB-11013). - useWideViewPort: Sets whether the WebView should enable support for the "viewport" HTML meta tag or should use a wide viewport. When the value of the setting is
no
, the layout width is always set to the width of the WebView control in device-independent (CSS) pixels. When the value isyes
and the page contains the viewport meta tag, the value of the width specified in the tag is used. If the page does not contain the tag or does not provide a width, then a wide viewport will be used. (defaults toyes
). - fullscreen: Sets whether the InappBrowser WebView is displayed fullscreen or not. In fullscreen mode, the status bar is hidden. Default value is
yes
.
iOS supports these additional options:
- hidden: set to
yes
to create the browser and load the page, but not show it. The loadstop event fires when loading is complete. Omit or set tono
(default) to have the browser open and load normally. - beforeload: set to enable the
beforeload
event to modify which pages are actually loaded in the browser. Accepted values areget
to intercept only GET requests,post
to intercept on POST requests oryes
to intercept both GET & POST requests. Note that POST requests are not currently supported and will be ignored (if you setbeforeload=post
it will raise an error). - clearcache: set to
yes
to have the browser's cookie cache cleared before the new window is opened - clearsessioncache: set to
yes
to have the session cookie cache cleared before the new window is opened. For WKWebView, requires iOS 11+ on target device. - cleardata: set to
yes
to have the browser's entire local storage cleared (cookies, HTML5 local storage, IndexedDB, etc.) before the new window is opened - closebuttoncolor: set as a valid hex color string, for example:
#00ff00
, to change from the default Done button's color. Only applicable if toolbar is not disabled. - closebuttoncaption: set to a string to use as the Done button's caption. Note that you need to localize this value yourself.
- disallowoverscroll: Set to
yes
orno
(default isno
). Turns on/off the the bounce of the WKWebView's UIScrollView. - hidenavigationbuttons: set to
yes
orno
to turn the toolbar navigation buttons on or off (defaults tono
). Only applicable if toolbar is not disabled. - navigationbuttoncolor: set as a valid hex color string, for example:
#00ff00
, to change from the default color. Only applicable if navigation buttons are visible. - toolbar: set to
yes
orno
to turn the toolbar on or off for the InAppBrowser (defaults toyes
) - toolbarcolor: set as a valid hex color string, for example:
#00ff00
, to change from the default color of the toolbar. Only applicable if toolbar is not disabled. - toolbartranslucent: set to
yes
orno
to make the toolbar translucent(semi-transparent) (defaults toyes
). Only applicable if toolbar is not disabled. - lefttoright: Set to
yes
to swap positions of the navigation buttons and the close button. Specifically, close button goes to the right and navigation buttons to the left. - enableViewportScale: Set to
yes
orno
to prevent viewport scaling through a meta tag (defaults tono
). - mediaPlaybackRequiresUserAction: Set to
yes
to prevent HTML5 audio or video from autoplaying (defaults tono
). - allowInlineMediaPlayback: Set to
yes
orno
to allow in-line HTML5 media playback, displaying within the browser window rather than a device-specific playback interface. The HTML'svideo
element must also include thewebkit-playsinline
attribute (defaults tono
). - presentationstyle: Set to
pagesheet
,formsheet
orfullscreen
to set the presentation style (defaults tofullscreen
). - transitionstyle: Set to
fliphorizontal
,crossdissolve
orcoververtical
to set the transition style (defaults tocoververtical
). - toolbarposition: Set to
top
orbottom
(default isbottom
). Causes the toolbar to be at the top or bottom of the window. - hidespinner: Set to
yes
orno
to change the visibility of the loading indicator (defaults tono
).
Windows supports these additional options:
- hidden: set to
yes
to create the browser and load the page, but not show it. The loadstop event fires when loading is complete. Omit or set tono
(default) to have the browser open and load normally. - hardwareback: works the same way as on Android platform.
- fullscreen: set to
yes
to create the browser control without a border around it. Please note that if location=no is also specified, there will be no control presented to user to close IAB window.
- location: Set to
Supported Platforms
- Android
- Browser
- iOS
- OSX
- Windows
Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
var ref2 = cordova.InAppBrowser.open(encodeURI('http://ja.m.wikipedia.org/wiki/ハングル'), '_blank', 'location=yes');
OSX Quirks
At the moment the only supported target in OSX is _system
.
_blank
and _self
targets are not yet implemented and are ignored silently. Pull requests and patches to get these to work are greatly appreciated.
iOS Quirks
Since the introduction of iPadOS 13, iPads try to adapt their content mode / user agent for the optimal browsing experience. This may result in iPads having their user agent set to Macintosh, making it hard to detect them as mobile devices using user agent string sniffing. You can change this with the PreferredContentMode
preference in config.xml
.
1<preference name="PreferredContentMode" value="mobile" />
The example above forces the user agent to contain iPad
. The other option is to use the value desktop
to turn the user agent to Macintosh
.
Browser Quirks
-
Plugin is implemented via iframe,
-
Navigation history (
back
andforward
buttons in LocationBar) is not implemented.
InAppBrowser
The object returned from a call to cordova.InAppBrowser.open
when the target is set to '_blank'
.
Methods
- addEventListener
- removeEventListener
- close
- show
- hide
- executeScript
- insertCSS
InAppBrowser.addEventListener
Adds a listener for an event from the
InAppBrowser
. (Only available when the target is set to'_blank'
)
ref.addEventListener(eventname, callback);
-
ref: reference to the
InAppBrowser
window (InAppBrowser) -
eventname: the event to listen for (String)
- loadstart: event fires when the
InAppBrowser
starts to load a URL. - loadstop: event fires when the
InAppBrowser
finishes loading a URL. - loaderror: event fires when the
InAppBrowser
encounters an error when loading a URL. - exit: event fires when the
InAppBrowser
window is closed. - beforeload: event fires when the
InAppBrowser
decides whether to load an URL or not (only with optionbeforeload
set). - message: event fires when the
InAppBrowser
receives a message posted from the page loaded inside theInAppBrowser
Webview.
- loadstart: event fires when the
-
callback: the function that executes when the event fires. The function is passed an
InAppBrowserEvent
object as a parameter.
Example
1 2var inAppBrowserRef; 3 4function showHelp(url) { 5 6 var target = "_blank"; 7 8 var options = "location=yes,hidden=yes,beforeload=yes"; 9 10 inAppBrowserRef = cordova.InAppBrowser.open(url, target, options); 11 12 inAppBrowserRef.addEventListener('loadstart', loadStartCallBack); 13 14 inAppBrowserRef.addEventListener('loadstop', loadStopCallBack); 15 16 inAppBrowserRef.addEventListener('loaderror', loadErrorCallBack); 17 18 inAppBrowserRef.addEventListener('beforeload', beforeloadCallBack); 19 20 inAppBrowserRef.addEventListener('message', messageCallBack); 21} 22 23function loadStartCallBack() { 24 25 $('#status-message').text("loading please wait ..."); 26 27} 28 29function loadStopCallBack() { 30 31 if (inAppBrowserRef != undefined) { 32 33 inAppBrowserRef.insertCSS({ code: "body{font-size: 25px;}" }); 34 35 inAppBrowserRef.executeScript({ code: "\ 36 var message = 'this is the message';\ 37 var messageObj = {my_message: message};\ 38 var stringifiedMessageObj = JSON.stringify(messageObj);\ 39 webkit.messageHandlers.cordova_iab.postMessage(stringifiedMessageObj);" 40 }); 41 42 $('#status-message').text(""); 43 44 inAppBrowserRef.show(); 45 } 46 47} 48 49function loadErrorCallBack(params) { 50 51 $('#status-message').text(""); 52 53 var scriptErrorMesssage = 54 "alert('Sorry we cannot open that page. Message from the server is : " 55 + params.message + "');" 56 57 inAppBrowserRef.executeScript({ code: scriptErrorMesssage }, executeScriptCallBack); 58 59 inAppBrowserRef.close(); 60 61 inAppBrowserRef = undefined; 62 63} 64 65function executeScriptCallBack(params) { 66 67 if (params[0] == null) { 68 69 $('#status-message').text( 70 "Sorry we couldn't open that page. Message from the server is : '" 71 + params.message + "'"); 72 } 73 74} 75 76function beforeloadCallBack(params, callback) { 77 78 if (params.url.startsWith("http://www.example.com/")) { 79 80 // Load this URL in the inAppBrowser. 81 callback(params.url); 82 } else { 83 84 // The callback is not invoked, so the page will not be loaded. 85 $('#status-message').text("This browser only opens pages on http://www.example.com/"); 86 } 87 88} 89 90function messageCallBack(params){ 91 $('#status-message').text("message received: "+params.data.my_message); 92} 93
InAppBrowserEvent Properties
-
type: the eventname, either
loadstart
,loadstop
,loaderror
,message
orexit
. (String) -
url: the URL that was loaded. (String)
-
code: the error code, only in the case of
loaderror
. (Number) -
message: the error message, only in the case of
loaderror
. (String) -
data: the message contents , only in the case of
message
. A stringified JSON object. (String)
Supported Platforms
- Android
- Browser
- iOS
- Windows
- OSX
Browser Quirks
loadstart
, loaderror
, message
events are not fired.
Windows Quirks
message
event is not fired.
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
ref.addEventListener('loadstart', function(event) { alert(event.url); });
InAppBrowser.removeEventListener
Removes a listener for an event from the
InAppBrowser
. (Only available when the target is set to'_blank'
)
ref.removeEventListener(eventname, callback);
-
ref: reference to the
InAppBrowser
window. (InAppBrowser) -
eventname: the event to stop listening for. (String)
- loadstart: event fires when the
InAppBrowser
starts to load a URL. - loadstop: event fires when the
InAppBrowser
finishes loading a URL. - loaderror: event fires when the
InAppBrowser
encounters an error loading a URL. - exit: event fires when the
InAppBrowser
window is closed. - message: event fires when the
InAppBrowser
receives a message posted from the page loaded inside theInAppBrowser
Webview.
- loadstart: event fires when the
-
callback: the function to execute when the event fires. The function is passed an
InAppBrowserEvent
object.
Supported Platforms
- Android
- Browser
- iOS
- Windows
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
var myCallback = function(event) { alert(event.url); }
ref.addEventListener('loadstart', myCallback);
ref.removeEventListener('loadstart', myCallback);
InAppBrowser.close
Closes the
InAppBrowser
window.
ref.close();
- ref: reference to the
InAppBrowser
window (InAppBrowser)
Supported Platforms
- Android
- Browser
- iOS
- Windows
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
ref.close();
InAppBrowser.show
Displays an InAppBrowser window that was opened hidden. Calling this has no effect if the InAppBrowser was already visible.
ref.show();
- ref: reference to the InAppBrowser window (
InAppBrowser
)
Supported Platforms
- Android
- Browser
- iOS
- Windows
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'hidden=yes');
// some time later...
ref.show();
InAppBrowser.hide
Hides the InAppBrowser window. Calling this has no effect if the InAppBrowser was already hidden.
ref.hide();
- ref: reference to the InAppBrowser window (
InAppBrowser
)
Supported Platforms
- Android
- iOS
- Windows
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank');
// some time later...
ref.hide();
InAppBrowser.executeScript
Injects JavaScript code into the
InAppBrowser
window. (Only available when the target is set to'_blank'
)
ref.executeScript(details, callback);
-
ref: reference to the
InAppBrowser
window. (InAppBrowser) -
injectDetails: details of the script to run, specifying either a
file
orcode
key. (Object)- file: URL of the script to inject.
- code: Text of the script to inject.
-
callback: the function that executes after the JavaScript code is injected.
- If the injected script is of type
code
, the callback executes with a single parameter, which is the return value of the script, wrapped in anArray
. For multi-line scripts, this is the return value of the last statement, or the last expression evaluated.
- If the injected script is of type
Supported Platforms
- Android
- Browser
- iOS
- Windows
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
ref.addEventListener('loadstop', function() {
ref.executeScript({file: "myscript.js"});
});
Browser Quirks
- only code key is supported.
Windows Quirks
Due to MSDN docs the invoked script can return only string values, otherwise the parameter, passed to callback will be [null]
.
InAppBrowser.insertCSS
Injects CSS into the
InAppBrowser
window. (Only available when the target is set to'_blank'
)
ref.insertCSS(details, callback);
-
ref: reference to the
InAppBrowser
window (InAppBrowser) -
injectDetails: details of the script to run, specifying either a
file
orcode
key. (Object)- file: URL of the stylesheet to inject.
- code: Text of the stylesheet to inject.
-
callback: the function that executes after the CSS is injected.
Supported Platforms
- Android
- iOS
- Windows
Quick Example
var ref = cordova.InAppBrowser.open('http://apache.org', '_blank', 'location=yes');
ref.addEventListener('loadstop', function() {
ref.insertCSS({file: "mystyles.css"});
});
__
Sample: Show help pages with an InAppBrowser
You can use this plugin to show helpful documentation pages within your app. Users can view online help documents and then close them without leaving the app.
Here's a few snippets that show how you do this.
- Give users a way to ask for help.
- Load a help page.
- Let users know that you're getting their page ready.
- Show the help page.
- Handle page errors.
Give users a way to ask for help
There's lots of ways to do this in your app. A drop down list is a simple way to do that.
1 2<select id="help-select"> 3 <option value="default">Need help?</option> 4 <option value="article">Show me a helpful article</option> 5 <option value="video">Show me a helpful video</option> 6 <option value="search">Search for other topics</option> 7</select> 8
Gather the users choice in the onDeviceReady
function of the page and then send an appropriate URL to a helper function in some shared library file. Our helper function is named showHelp()
and we'll write that function next.
1 2$('#help-select').on('change', function (e) { 3 4 var url; 5 6 switch (this.value) { 7 8 case "article": 9 url = "https://cordova.apache.org/docs/en/latest/" 10 + "reference/cordova-plugin-inappbrowser/index.html"; 11 break; 12 13 case "video": 14 url = "https://youtu.be/F-GlVrTaeH0"; 15 break; 16 17 case "search": 18 url = "https://www.google.com/#q=inAppBrowser+plugin"; 19 break; 20 } 21 22 showHelp(url); 23 24}); 25
Load a help page
We'll use the open
function to load the help page. We're setting the hidden
property to yes
so that we can show the browser only after the page content has loaded. That way, users don't see a blank browser while they wait for content to appear. When the loadstop
event is raised, we'll know when the content has loaded. We'll handle that event shortly.
1 2function showHelp(url) { 3 4 var target = "_blank"; 5 6 var options = "location=yes,hidden=yes"; 7 8 inAppBrowserRef = cordova.InAppBrowser.open(url, target, options); 9 10 inAppBrowserRef.addEventListener('loadstart', loadStartCallBack); 11 12 inAppBrowserRef.addEventListener('loadstop', loadStopCallBack); 13 14 inAppBrowserRef.addEventListener('loaderror', loadErrorCallBack); 15 16} 17
Let users know that you're getting their page ready
Because the browser doesn't immediately appear, we can use the loadstart
event to show a status message, progress bar, or other indicator. This assures users that content is on the way.
1 2function loadStartCallBack() { 3 4 $('#status-message').text("loading please wait ..."); 5 6} 7
Show the help page
When the loadstopcallback
event is raised, we know that the content has loaded and we can make the browser visible. This sort of trick can create the impression of better performance. The truth is that whether you show the browser before content loads or not, the load times are exactly the same.
1 2function loadStopCallBack() { 3 4 if (inAppBrowserRef != undefined) { 5 6 inAppBrowserRef.insertCSS({ code: "body{font-size: 25px;}" }); 7 8 $('#status-message').text(""); 9 10 inAppBrowserRef.show(); 11 } 12 13} 14
You might have noticed the call to the insertCSS
function. This serves no particular purpose in our scenario. But it gives you an idea of why you might use it. In this case, we're just making sure that the font size of your pages have a certain size. You can use this function to insert any CSS style elements. You can even point to a CSS file in your project.
Handle page errors
Sometimes a page no longer exists, a script error occurs, or a user lacks permission to view the resource. How or if you handle that situation is completely up to you and your design. You can let the browser show that message or you can present it in another way.
We'll try to show that error in a message box. We can do that by injecting a script that calls the alert
function. That said, this won't work in browsers on Windows devices so we'll have to look at the parameter of the executeScript
callback function to see if our attempt worked. If it didn't work out for us, we'll just show the error message in a <div>
on the page.
1 2function loadErrorCallBack(params) { 3 4 $('#status-message').text(""); 5 6 var scriptErrorMesssage = 7 "alert('Sorry we cannot open that page. Message from the server is : " 8 + params.message + "');" 9 10 inAppBrowserRef.executeScript({ code: scriptErrorMesssage }, executeScriptCallBack); 11 12 inAppBrowserRef.close(); 13 14 inAppBrowserRef = undefined; 15 16} 17 18function executeScriptCallBack(params) { 19 20 if (params[0] == null) { 21 22 $('#status-message').text( 23 "Sorry we couldn't open that page. Message from the server is : '" 24 + params.message + "'"); 25 } 26 27} 28
More Usage Info
Local Urls ( source is in the app package )
var iab = cordova.InAppBrowser;
iab.open('local-url.html'); // loads in the Cordova WebView
iab.open('local-url.html', '_self'); // loads in the Cordova WebView
iab.open('local-url.html', '_system'); // Security error: system browser, but url will not load (iOS)
iab.open('local-url.html', '_blank'); // loads in the InAppBrowser
iab.open('local-url.html', 'random_string'); // loads in the InAppBrowser
iab.open('local-url.html', 'random_string', 'location=no'); // loads in the InAppBrowser, no location bar
Whitelisted Content
var iab = cordova.InAppBrowser;
iab.open('http://whitelisted-url.com'); // loads in the Cordova WebView
iab.open('http://whitelisted-url.com', '_self'); // loads in the Cordova WebView
iab.open('http://whitelisted-url.com', '_system'); // loads in the system browser
iab.open('http://whitelisted-url.com', '_blank'); // loads in the InAppBrowser
iab.open('http://whitelisted-url.com', 'random_string'); // loads in the InAppBrowser
iab.open('http://whitelisted-url.com', 'random_string', 'location=no'); // loads in the InAppBrowser, no location bar
Urls that are not white-listed
var iab = cordova.InAppBrowser;
iab.open('http://url-that-fails-whitelist.com'); // loads in the InAppBrowser
iab.open('http://url-that-fails-whitelist.com', '_self'); // loads in the InAppBrowser
iab.open('http://url-that-fails-whitelist.com', '_system'); // loads in the system browser
iab.open('http://url-that-fails-whitelist.com', '_blank'); // loads in the InAppBrowser
iab.open('http://url-that-fails-whitelist.com', 'random_string'); // loads in the InAppBrowser
iab.open('http://url-that-fails-whitelist.com', 'random_string', 'location=no'); // loads in the InAppBrowser, no location bar
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
14 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Score
1.7
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to @capacitor-mobi/cordova-plugin-inappbrowser
cordova-plugin-inappbrowser
Cordova InAppBrowser Plugin
vue-cli-plugin-vuetify
Vuetify Framework Plugin for Vue CLI 3
@ionic-native/in-app-browser
Ionic Native - Native plugins for ionic apps
cordova-plugin-safariviewcontroller
Forget InAppBrowser for iOS - this is way better for displaying read-only web content in your PhoneGap app.