I have an application running fine with Meteor 1.2.1 / Cordova. Both iOS and Android devices and simulators work as expected. The application is leveraging the Braintree drop-in UI for payment processing.
From a security perspective, the application is using both App.accessRules and BrowserPolicy
I upgraded the application to Meteor 1.3-beta.11, did some testing, and ran into an issue with iOS. The Braintree drop-in UI was not working properly and I was receiving the following in the logs:
ERROR Internal navigation rejected - not set for url=‘https://assets.braintreegateway.com/dropin/2.15.4/inline-frame.html#’
The above made sense given the changes to Cordova and the new version of Cordova-iOS / WKWebView. The Braintree drop-in UI uses iFrames and it was not able to access properly.
I was able to address the issue by adding the following to the Cordova config.xml.
<allow-navigation href="https://*.braintreegateway.com" />
The question: With Meteor 1.3, should the mobile.config processing (App.accessRule or other) be enhanced to provide support for the above situation?
Thanks for your thoughts and considerations.