Cordova / Capacitor Security

Keep Capacitor enrollment, DOM inspection, and native tools limited to trusted developer builds.

Use Ansight only in approved development variants and on a trusted local network. Enrollment uses clear-text UDP and ws://.

  • Guard initialization with the application’s developer-build flag.
  • Keep DOM and native tool access deny-all in protected builds.
  • Prefer read-only tools.
  • Do not embed enrollment payloads in JavaScript or public web assets.
  • Configure only the native QR and local-network privacy descriptions the app actually invokes.
  • Revoke a registration in Studio or clear app data when the installation should no longer reconnect.
  • Keep cellular host connections disabled unless the workflow intentionally uses mobile data or a personal hotspot.
  • Treat JavaScript/native crash messages, stacks, breadcrumbs, and metadata as sensitive. Disable crash capture or handoff when policy requires it.

Native crash reports are bounded and stored in app-private files until delivery or expiry. See Crash Capture.