diff --git a/framework/src/org/apache/cordova/engine/SystemWebViewEngine.java b/framework/src/org/apache/cordova/engine/SystemWebViewEngine.java index 3201c744..e703f09d 100755 --- a/framework/src/org/apache/cordova/engine/SystemWebViewEngine.java +++ b/framework/src/org/apache/cordova/engine/SystemWebViewEngine.java @@ -152,6 +152,15 @@ public class SystemWebViewEngine implements CordovaWebViewEngine { settings.setJavaScriptCanOpenWindowsAutomatically(true); settings.setLayoutAlgorithm(LayoutAlgorithm.NORMAL); + /** + * https://developer.android.com/reference/android/webkit/WebSettings#setAllowFileAccess(boolean) + * + * SDK >= 30 has recently set this value to false by default. + * It is recommended to turn off this settings To prevent possible security issues targeting Build.VERSION_CODES.Q and earlier. + * For existing functionality, this setting is set to true. In a future release, this should be defaulted to false. + */ + settings.setAllowFileAccess(true); + String manufacturer = android.os.Build.MANUFACTURER; LOG.d(TAG, "CordovaWebView is running on device made by: " + manufacturer);