GitHub user breautek added a comment to the discussion: Google Autocomplete 
Referrer

Any service that restricts their API key to a domain is not a good fit in 
webview apps in general (not just Cordova).

If the API key is known, anybody can make an app with any domain as the webview 
asset loader, and potentially use your key, not just `https://localhost`

Typically google APIs have a native client for android & iOS that will restrict 
an API key to the bundle ID on iOS, or the build key fingerprint for android. 
You'll need to find a plugin (or build one) that interfaces with the native 
mobile libraries instead of using the web API.

GitHub link: 
https://github.com/apache/cordova/discussions/560#discussioncomment-13866278

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to