Cordova CLI 3.3 and 3.5 build options to be disabled

[PaulF_IntelCorp]

The Intel XDK build system will stop supporting Cordova CLI 3.3 and CLI 3.5 builds on Monday, September 21. Please upgrade your existing projects to CLI 4.1.2 ASAP! The current production release of the Intel XDK (v2366) defaults to CLI 4.1.2 for all new projects. Insure that you are using the most recent version of the XDK so you can upgrade your project to CLI 4.1.2.

Updating to 4.1.2 should not be a significant change for most projects. Likewise, the 3.3 and 3.5 build options have been deprecated for about six months and, for all practical purposes, have not been viable build options for submission of apps to stores, due to various new requirements from the stores and security issues associated with these older CLI options. See the following extracts from the existing documentation:

Due to a security leak in the Cordova for Android domain whitelisting feature (intents feature), your Android apps must be built with at least Cordova 3.5.1 if they are to be submitted to the Google Play store. When building a Cordova for Android app, specify 3.5 (or 4.1.2) in the Cordova CLI Version field in the Build Settings section of the Projects tab in the latest version of the Intel XDK. Those applications built with the Crosswalk 10 (see above) include Android Cordova 3.6.3 and, therefore, already include this security fix.

In order to meet the Apple 64-bit requirements for all new apps submitted after February 1st, 2015 or updated after June 1st, 2015, your Apple iOS* apps must be built with at least iOS Cordova 3.5. When building a Cordova for iOS app, specify 3.5 (or 4.1.2) in the Cordova CLI Version field in the Build Settings section of the Projects tab in the latest version of the Intel XDK.

[Hamilton_Tenório_da_]

On the tab Android-Cordova there isn´t this option. Is there some place I need to config this?

[PaulF_IntelCorp]

For Android-Cordova you should use Crosswalk 14, until we make Crosswalk 15 available, at which point you should consider moving to 15. The Crosswalk 10-14 builds we support all use Cordova-Android 3.6.3. The new Crosswalk 15 will support Cordova-Android 4.1.0. Regardless, the Crosswalk builds are not impacted by the removal of CLI 3.3 and CLI 3.5.

[Hamilton_Tenório_da_]

It is a bit confuse for me. Let me say in a short way: with Crosswalk Android it is only use Croswalk 14 now and 15 after. That is it? Simple that?

[PaulF_IntelCorp]

Yes, that's the simplest way to look at it: use CW14 now and CW15 when it becomes available. :)

[Hamilton_Tenório_da_]

Great! Thank you.

[Mour_D_]

hey after update i am unable to play vidoe which is inside my app , please help me what to do like what whitelist needed , i  had added below meta

<meta http-equiv="Content-Security-Policy" content="media-src *">

[PaulF_IntelCorp]

There is an issue in the CW 7-14 builds that is preventing audio and video from playing. We have identified the source of the problem and hope to have it pushed to the production build system very soon. Until then, try using the shared mode option or switch to CLI 5.1.1 and build a Crosswalk 15 app.

[Carmelo_M_]

Hi my app was rejected for security reasons, google suggest to upgrade to cordova 3.5.1

The vulnerabilities were fixed in Apache Cordova v.3.5.1

I've build my app for android using cordova cli 5.1.1 where I'm wrong?

• Building a Cordova 5.1.1 application.
• The application name is "MONITOR GAO"
• The package name is "com.mcsoftware.monitor"
• Plugin "cordova-plugin-device" (1.0.1) installed.
• Plugin "cordova-plugin-file" (2.1.0) installed.
• Plugin "cordova-plugin-media" (1.0.1) installed.
• Plugin "com.clone.phonegap.plugins.PushPlugin" (2.4.1) installed.
• Plugin "intel.xdk.camera" (1.2.3) installed.
• Plugin "intel.xdk.file" (1.2.2) installed.
• Plugin "cordova-plugin-network-information" (1.0.1) installed.
• Plugin "nl.x-services.plugins.toast" (2.0.4) installed.
• Plugin "cordova-plugin-appversion" (1.0.0) installed.
• Plugin "cordova-plugin-statusbar" (1.0.0) installed.
• Plugin "cordova-plugin-legacy-whitelist" (1.1.0) installed.
• App name updated to [MONITOR GAO]
• Updated "minSdkVersion" with "14"
• Updated "targetSdkVersion" with "19"
• Updated "installLocation" to "auto"
• Updated "versionCode" to "2"
• Updated "versionName" to "0.0.3"
• Added "debuggable" to "false"

[PaulF_IntelCorp]

You should not be getting this warning from Google if you build with CLI 5, since it uses Android-Cordova 4.1.

Did you submit an app built with CLI 5 that was rejected by Google?

Or are you saying that attempting to build your app with CLI 5 fails?

[jose_andres_S_]

Hi 

I have the same error, I am using Cordova 5.3.3 and  android  API 22, what should I do?

I've tried the following:
1. update the version of Cordova via npm.
2. my project had the crosswalk plugin, but remove that displayed the following error when compiling "current NDK support is deprecated. Alternative will be provided in the future".
3. Remove any additional plugins that thought had something to do.

and I'm still unresolved

 I submit an app built with CLI 5 that was rejected by Google

mail that was sent contains:

The vulnerabilities were fixed in Apache Cordova v.3.5.1. For more information about the vulnerabilities, and for guidance on upgrading Apache Cordova, please see https://cordova.apache.org/announcements/2014/08/04/android-351.html. For other technical questions about Apache Cordova, please post to https://www.stackoverflow.com/questions and use the tags "android-security" and "cordova."

thanks for all the help they can provide

[PaulF_IntelCorp]

Jose:

You cannot update the version of Cordova that our build system uses, you can only select the versions that we provide in the Build Settings section of the Projects tab (currently: 4.1.2 and 5.1.1). The XDK and our build system do not use the local CLI that is installed on your dev system.

Sounds like you are trying to build for Crosswalk, are you setting your CLI version 5.1.1 on the Build Settings and selecting Crosswalk 15 for the Crosswalk version number? Alternative would be to use CLI 4.1.2 and select Crosswalk 14 for the version. If you are selecting Crosswalk 7 you could be getting this message, since it is built with an older version of Cordova-Android.

Plugins should not impact this issue.