diff options
| author | Selim Gurun <sgurun@google.com> | 2017-05-18 11:50:26 -0700 |
|---|---|---|
| committer | Selim Gurun <sgurun@google.com> | 2017-05-18 23:46:51 +0000 |
| commit | b18fbfa95f3d80dff30a56d9cf9eaf72b2c2e09e (patch) | |
| tree | 5cf3ca10d084f526f336440824c5b5a89a829a2d /core/java/android/webkit | |
| parent | 61e164d1e1dbce34526f33f6557e86eb869bd213 (diff) | |
Update documentation for postmessage method
Bug: 35012584
Move wildcard description to body from parameter, as per API
documentation guidelines.
Test: documentation change
Change-Id: Ibf93bcd5bf509898d293db5729b760f5e1b023b4
Diffstat (limited to 'core/java/android/webkit')
| -rw-r--r-- | core/java/android/webkit/WebView.java | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/core/java/android/webkit/WebView.java b/core/java/android/webkit/WebView.java index ecb25fead18c..a40e254af566 100644 --- a/core/java/android/webkit/WebView.java +++ b/core/java/android/webkit/WebView.java @@ -1939,12 +1939,12 @@ public class WebView extends AbsoluteLayout * messages to a certain target origin. See * <a href="https://html.spec.whatwg.org/multipage/comms.html#posting-messages"> * HTML5 spec</a> for how target origin can be used. + * <p> + * A target origin can be set as a wildcard ("*"). However this is not recommended. + * See the page above for security issues. * * @param message the WebMessage - * @param targetOrigin the target origin. This is the origin of the page - * that is intended to receive the message. For best security - * practices, the user should not specify a wildcard (*) when - * specifying the origin. + * @param targetOrigin the target origin. */ public void postWebMessage(WebMessage message, Uri targetOrigin) { checkThread(); |
