title: Android Webview: disable CORS
body: <p>Does Android allow native apps to disable CORS security policies for http:// (not local/file) requests?</p>
  
  <p>In my native app, a webview shows a remote html via http://, not on the local/file system. This seems to be CORS-restricted in the same way as within webbrowsers.</p>
  
  <p>Worakround: A native-js bridge for ajax requests to cross-domains which do not have <code>Access-Control-Allow-Origin: *</code> is my quick'n'dirt solution. (jsonp or server-side proxy is not an option because cookie+ip of client are checked by the webservice.)</p>
  
  <p>Can this policy be disabled for inapp webviews?</p>
  
  <p>Please let me know, if there is a simple flag for allowing js to bypass this restriction which limits the "native" app's webview.</p>