title: PhoneGap Access Origin Restrictions Don't Work
body: <p>I'm developing an iOS app using Cordova 3.3.0.  In my config.xml, I have the following:</p>
  
  <p><code>&lt;access origin="https://*.kidsintouch.com" /&gt;</code></p>
  
  <p>Theoretically, that should stop my app from accessing any resources that try to load outside that domain.</p>
  
  <p>However, when I run the app in the simulator or on device via Xcode, I can access images from any domain.  </p>
  
  <p>The PhoneGap docs say :</p>
  
  <blockquote>
    <p>Unlike the Android platform noted above, navigating to non-whitelisted domains via href hyperlink on iOS prevents the page from opening at all.</p>
  </blockquote>
  
  <p>However, I'm still able to put an external link on a page in the app and click on it.</p>
  
  <p>When I run the app in Xcode, I see the following console output:</p>
  
  <p><code>
  2014-01-02 06:47:16.469 Kids In Touch[10454:60b] Multi-tasking -&gt; Device: YES, App: YES
  2014-01-02 06:47:16.480 Kids In Touch[10454:60b] Unlimited access to network resources
  2014-01-02 06:47:17.276 Kids In Touch[10454:60b] Resetting plugins due to page load.
  2014-01-02 06:47:18.157 Kids In Touch[10454:60b] Finished load of: file:///var/mobile/Applications/8DBB3EE2-A33D-4523-A51F-B72AJ21E5338/Kids%20In%20Touch.app/www/index.html#/intro
  2014-01-02 06:47:19.629 Kids In Touch[10454:60b] Resetting plugins due to page load.
  </code></p>
  
  <p>The <code>Unlimited access to network resources</code> clearly shows something is wrong. When I click on a bogus link to Google I put in the app, the console displays:</p>
  
  <p><code>
  2014-01-02 06:47:20.755 Kids In Touch[10454:60b] Finished load of: https://www.google.com/
  </code></p>
  
  <p>So clearly my <code>access origin</code> restriction is not actually restricting anything.</p>
  
  <p>Is there something I am doing wrong?  How do I prevent my app from accessing any resources outside the domain I've provided?</p>
  
  <p>Thanks</p>