Book Image

Mastering PhoneGap Mobile Application Development

By : Kerri Shotts
Book Image

Mastering PhoneGap Mobile Application Development

By: Kerri Shotts

Overview of this book

PhoneGap is a useful and flexible tool that enables you to create complex hybrid applications for mobile platforms. In addition to the core technology, there is a large and vibrant community that creates third-party plugins that can take your app to the next level. This book will guide you through the process of creating a complex data-driven hybrid mobile application using PhoneGap, web technologies, and third-party plugins. A good foundation is critical, so you will learn how to create a useful workflow to make development easier. From there, the next version of JavaScript (ES6) and the CSS pre-processor SASS are introduced as a way to simplify creating the look of the mobile application. Responsive design techniques are also covered, including the flexbox layout module. As many apps are data-driven, you'll build an application throughout the course of the book that relies upon IndexedDB and SQLite. You'll also download additional content and address how to handle in-app purchases. Furthermore, you’ll build your own customized plugins for your particular use case. When the app is complete, the book will guide you through the steps necessary to submit your app to the Google Play and Apple iTunes stores.
Table of Contents (19 chapters)
Mastering PhoneGap Mobile Application Development
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Security concerns


Now that we've covered file transfers, it's important to go over some important security concerns, since your app is no longer a silo disconnected from the rest of the Internet.

  • Your app shouldn't automatically trust the content that it receives from the server. The server could be compromised, or a man-in-the-middle attack might potentially modify the content.

  • Your server definitely shouldn't automatically trust the content it receives from your app (or anywhere else). Your best bet is to scan every uploaded file using a virus scanner; but this is, of course, not an absolute guarantee.

  • If at all possible, you should favor SSL connections (HTTPS) rather than unencrypted communication.

  • While using SSL connections, self-signed certificates and certificates that are signed by a certificate authority that the device doesn't trust will be rejected. Rather than setting trustAllHosts to true, endeavor to provide trusted certificates on the servers you control.

  • If you're sending authentication...