SAP Fiori Client Guide


Parent topic: Security Information

Access to Native Device Capabilities

Some SAP Fiori apps take advantage of native device capabilities such as the camera, PIM integration (contacts and calendar), and geolocation. For security reasons, it is necessary to prevent unauthorized access to those features.


In this section:
    No Bridge for Non-Fiori Content
    No Bridge is a security feature that prevents access to all nonessential plugins in SAP Fiori Client if the WebView URL has a different host than the Fiori URL specified in the application settings. You can permit additional domains to access the plugins by using the nobridgewhitelist configuration property.
    Feature Restriction Policy
    Feature restriction is a client policy that can be defined for SAP Fiori Client and other hybrid apps in SAP Mobile Platform Server or SAP HCP, mobile service for development and operations. Feature restriction policies enable the administrator to control which native device features are available for use by SAP Fiori applications.
    Cordova Whitelist
    Cordova 5.0.0 and later provides a plugin named cordova-plugin-whitelist. This plugin is added by default when you create a new Cordova app. The plugin lets you specify the location from which a page can load its dynamic resources, the locations it can communicate with, and the intents it can use.

Parent topic: Security Information