A framework for building native apps with React. http://facebook.github.io/react-native/
Go to file
Rafael Oleza 8a21abcd6b Prevent cross origin requests to development server
Summary:
This diff adds a middleware to the RN development server to prevent processing requests coming from a third-party website.

The way we choose to do it is to block any request that has an origin header and it's different than localhost. This will still allow simulators to work properly while blocking potential external websites to do malign CORS requests.

This is just a first quick measure to block a potential attack vector while we implement full authentication in the RN development server

Reviewed By: mjesun

Differential Revision: D9238674

fbshipit-source-id: b7bdc40dabc2f4d92f5ac84515f93b89efa4e833
2018-08-22 12:31:19 -07:00
.circleci Run failing tests in CI, without turning CI red (#20775) 2018-08-22 12:31:19 -07:00
.github Link to Discuss as a lightweight discussion forum (#20697) 2018-08-17 15:19:43 -07:00
ContainerShip Bump Android NDK to r17b (#20357) 2018-07-30 14:02:11 -07:00
IntegrationTests Typing View style as ViewStyleProp 2018-08-14 16:32:11 -07:00
Libraries Implement Image.queryCache on iOS (#18782) 2018-08-20 16:17:18 -07:00
RNTester Bump Android Support Library to 27.1.1 (#20586) 2018-08-20 18:08:52 -07:00
React Way to register RCT_MODULE in Plugin2.0 instead of +load 2018-08-18 10:01:57 -07:00
ReactAndroid use latest infer-annotations from maven (#20599) 2018-08-22 12:31:19 -07:00
ReactCommon Solve the bug related to baseline height 2018-08-22 12:31:19 -07:00
ReactNative Back to JNI storage 2018-08-06 02:16:22 -07:00
bots Prettier the rest of ReactNative 2018-05-11 13:52:30 -07:00
flow Adding flow strict to as many xplat files as possible 2018-07-27 12:31:42 -07:00
flow-github Add extra flowtype stubs for metro (#20429) 2018-07-27 20:32:47 -07:00
gradle/wrapper fix gradle wrapper issue (#19976) 2018-08-08 15:03:01 -07:00
jest Add missing trailing comma 2018-08-13 12:01:57 -07:00
keystores Apply auto-formatter for BUCK files in fbandroid. 2017-02-27 14:04:56 -08:00
lib Adding flow strict local to remaining possible files in xplat/JS 2018-08-09 08:54:44 -07:00
local-cli Prevent cross origin requests to development server 2018-08-22 12:31:19 -07:00
react-native-cli Prettier files with shebang 2018-05-11 13:52:30 -07:00
react-native-git-upgrade Prettier files with shebang 2018-05-11 13:52:30 -07:00
scripts Run failing tests in CI, without turning CI red (#20775) 2018-08-22 12:31:19 -07:00
third-party-podspecs iOS OSS: update podspec's to target iOS 9.0 2018-05-23 06:16:00 -07:00
.buckconfig use android build-tools 26.0.2 and set compileSdk to 26 (#19662) 2018-06-13 10:39:55 -07:00
.buckjavaargs limiting BUCK's memory for CI 2016-02-01 10:49:33 -08:00
.editorconfig Fix indent of .gradle files 2016-10-19 16:58:36 -07:00
.eslintignore Split out docs to their own repo 2017-12-05 13:02:54 -08:00
.eslintrc Initial Detox E2E iOS configuration to be run on RNTester (#20235) 2018-07-30 14:31:24 -07:00
.flowconfig v0.79.1 in xplat/js 2018-08-18 22:19:34 -07:00
.flowconfig.android v0.79.1 in xplat/js 2018-08-18 22:19:34 -07:00
.gitattributes Added a .gitattributes file, ensuring that Bash script source files (gradlew and 2015-10-13 23:10:39 -04:00
.gitignore Check Flow and run basic packager tests using open source RN config 2018-08-09 16:17:40 -07:00
.npmignore Update .npmignore to include generated bundle file 2017-02-03 11:43:31 -08:00
.nvmrc Add .nvmrc + fix node version for eslint 5 compat (#20109) 2018-07-31 02:34:16 -07:00
CODE_OF_CONDUCT.md Create CODE_OF_CONDUCT.md 2017-10-26 16:47:27 -07:00
CONTRIBUTING.md Removed last traces of @providesModule from React Native 2018-04-26 08:30:54 -07:00
DockerTests.md Typo in DockerTests.md (#20009) 2018-07-02 20:32:07 -07:00
Jenkinsfile Container Testing Updates 2017-04-12 16:31:35 -07:00
LICENSE Update to MIT license 2018-02-16 18:31:53 -08:00
LICENSE-docs More licenses 2015-03-24 19:59:10 -07:00
README.md add windows ci (#20281) 2018-07-19 16:02:35 -07:00
React.podspec iOS: Support <ActivityIndicator> component 2018-05-23 10:22:47 -07:00
Releases.md Fix typo in Releases.md (#20487) 2018-08-01 07:16:56 -07:00
appveyor.yml switch to yarn in appveyor (#20566) 2018-08-07 21:46:39 -07:00
build.gradle fix gradle wrapper issue (#19976) 2018-08-08 15:03:01 -07:00
cli.js Prettier the rest of ReactNative 2018-05-11 13:52:30 -07:00
gradlew fix gradle wrapper issue (#19976) 2018-08-08 15:03:01 -07:00
gradlew.bat fix gradle wrapper issue (#19976) 2018-08-08 15:03:01 -07:00
jest-preset.json Fix jest snapshot testing on windows 2018-05-31 12:58:05 -07:00
package.json Fixes #20712 on unix-like OS (#20751) 2018-08-20 07:32:01 -07:00
react.gradle Better Android Gradle Plugin 3.x integration (#20526) 2018-08-03 17:02:12 -07:00
rn-cli.config.js Update license headers for MIT license 2018-02-16 18:31:53 -08:00
rn-get-polyfills.js Prettier the rest of ReactNative 2018-05-11 13:52:30 -07:00
runXcodeTests.sh Uniformizes how THIS_DIR is computed in xplat/js 2018-07-19 05:16:22 -07:00
settings.gradle Back to JNI storage 2018-08-06 02:16:22 -07:00
setupBabel.js Prettier the rest of ReactNative 2018-05-11 13:52:30 -07:00
yarn.lock Add Yarn lockfile 2018-08-22 12:20:56 -07:00

README.md

React Native · Circle CI Status Build status npm version PRs Welcome

Learn once, write anywhere: Build mobile apps with React.

  • Build native mobile apps using JavaScript and React: React Native lets you build mobile apps using only JavaScript. It uses the same design as React, letting you compose a rich mobile UI from declarative components.
  • A React Native app is a real mobile app: With React Native, you don't build a "mobile web app", an "HTML5 app", or a "hybrid app". You build a real mobile app that's indistinguishable from an app built using Objective-C, Java, or Swift. React Native uses the same fundamental UI building blocks as regular iOS and Android apps. You just put those building blocks together using JavaScript and React.
  • Don't waste time recompiling: React Native lets you build your app faster. Instead of recompiling, you can reload your app instantly. With hot reloading, you can even run new code while retaining your application state. Give it a try - it's a magical experience.
  • Use native code when you need to: React Native combines smoothly with components written in Objective-C, Java, or Swift. It's simple to drop down to native code if you need to optimize a few aspects of your application. It's also easy to build part of your app in React Native, and part of your app using native code directly - that's how the Facebook app works.

The focus of React Native is on developer efficiency across all the platforms you care about - learn once, write anywhere. Facebook uses React Native in multiple production apps and will continue investing in React Native.

See the official React Native website for an introduction to React Native.

Supported operating systems are >= Android 4.1 (API 16) and >= iOS 8.0.


Getting Started

Follow the Getting Started guide. The recommended way to install React Native depends on your project. Here you can find short guides for the most common scenarios:


Documentation

The websites documentation is divided into multiple sections.

Another great way to learn more about the components and APIs included with React Native is to read their source. Look under the Libraries/Components directory for components like ScrollView and TextInput, for example. The RNTester example is also here to demonstrate some of the ways to use these components. From the source you can get an accurate understanding of each components behavior and API.

The React Native documentation only discusses the components, APIs and topics specific to React Native (React on iOS and Android). For further documentation on the React API that is shared between React Native and React DOM, refer to the React documentation.


Upgrading

React Native is under active development. See the guide on upgrading React Native to keep your project up-to-date.


Contributing

Read below to learn how you can take part in improving React Native.

Code of Conduct

Facebook has adopted a Code of Conduct that we expect project participants to adhere to. Please read the full text so that you can understand what actions will and will not be tolerated.

Contributing Guide

Read our contributing guide to learn about our development process, how to propose bug fixes and improvements, and how to build and test your changes to React Native.

Beginner Friendly Bugs

We have a list of beginner friendly issues to help you get your feet wet in the React Native codebase and familiar with our contribution process. This is a great place to get started.


License

React Native is MIT licensed.

React Native documentation is Creative Commons licensed.