05-12-2011 11:00 AM
03-30-2012 01:03 PM
There is relatively little security risk here, as you can't expose the WebWorks apis to the wildcard. It's more of a design decision than a security one, as the question should be asked: "do you really need access to the entire internet in your app?". In some cases yes you definitely do. In other cases, you may be opening up your application to unpredictable sites which are not formatted or designed for the use you are putting them, and a resulting poor experience for your users.