Does the phone / callback / cordon have a white list on all platforms? Is it implemented the same way for everyone?
The white list is present on both iOS and Android, but not on other platforms.
In the iOS section, it appears under the name βExternal Hosts,β which is explained here: http://wiki.phonegap.com/w/page/41631150/PhoneGap%20for%20iOS%20FAQ
Q. Links to and imported files from external hosts don't load? A. The latest code has the new white-list feature. If you are referencing external hosts, you will have to add the host in PhoneGap.plist under the "ExternalHosts" key. Wildcards are ok. So if you are connecting to "http://phonegap.com", you have to add "phonegap.com" to the list (or use the wildcard "*.phonegap.com" which will match subdomains as well).
For instance:
<key>ExternalHosts</key> <array> <string>*</string> </array>
Android , . : https://groups.google.com/forum/#!topic/phonegap/9NZ4J4l1I-s
"" xml/phonegap.xml. perl
To allow all domains (debugging): <access origin=".*"/>
:
<access origin="https://example.com" subdomains="true" />
BlackBerry WebWorks. config.xml:
https://bdsc.webapps.blackberry.com/html5/documentation/ww_developing/access_element_834677_11.html
URL- "*" wild card.