2017-06-19 65 views
1

不能正常工作使用Visual Studio 2017年,科尔多瓦和运行index.js脚本:HTTP GET科尔多瓦

function onDeviceReady(){ 
    (...) 
    document.getElementById("Button1").addEventListener("click", getfromAPI); 
    function getfromAPI() { 
     var theUrl = "https://haveibeenpwned.com/api/v2/breaches"; 
     var request = new XMLHttpRequest(); 
     var response = request.responseText; 
     console.log(response); 

     request.open("GET", theUrl, true); 
     request.send(null); 
    } 

遗憾的是没有被收集到日志中,我不知道如果请求是工作在所有?

我尝试过的一些命令的不同摆放,但它并没有什么差别:像

function onDeviceReady(){ 
    (...) 
    document.getElementById("Button1").addEventListener("click", getfromAPI); 
    function getfromAPI() { 
     var theUrl = "https://haveibeenpwned.com/api/v2/breaches"; 
     var request = new XMLHttpRequest(); 


     request.open("GET", theUrl, true); 
     request.send(null); 
     var response = request.responseText; 
     console.log(response); 

    } 

内容安全策略如下:

<meta http-equiv="Content-Security-Policy" content="default-src 'self' data: 
gap: https://ssl.gstatic.com 'unsafe-eval'; 
style-src 'self' 'unsafe-inline'; 
media-src *"> 
+0

?你有一个Content-Securiy-Policy元标签吗? – jcesarmobile

+0

yes白名单插件似乎是根据config.xml进行安装的,我还在说明中添加了内容安全策略标签 – JackMix32

回答

0

你有2个问题:

  1. CSP。您必须添加haveibeenpwned以允许连接<meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com https://haveibeenpwned.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *">
  2. XHR代码不正确。你有你已经安装了白名单的插件来监听onreadystatechange

    request.onreadystatechange = function() { 
        if (request.readyState == 4 && request.status == 200) {   
         console.log(request.responseText);   
        } 
    };