Cordova release build blocks ajax requests

Question

Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails to make any ajax requests on Release(Signed) Build.

Tried communicating from native code using a plugin, the connection is successful

The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices.

Permissions:

<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />

Whitelist plugin in config.xml:

<feature name="Whitelist">
        <param name="android-package" value="org.apache.cordova.whitelist.WhitelistPlugin" />
        <param name="onload" value="true" />
    </feature>

Even tested with logs in ChromeWebViewImpl.java

Returns true when asked for shouldAllow

CSP:

<meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *; connect-src https://mysubdomain.mydomain.com">

Please note the CSP works for all Android, iOS devices except for Nexus 5X 7.1.1, i even tried removing connect-src, but same result.

Did anyone come across similar issue ?

Answer 1

The issue is with WebView version 53 and use of Symantec Certificate.

Its a bug in Chrome Version 53

https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=ALERT2160

Update your Chrome version from playstore you will not face this issue, it has nothing to do with Whitelist plugin.