You do not need either one or the other.
if you are on iOS just add a new external host and set it to *
if you are on Android add this to your manifest
<access origin="https://example.com" subdomains="true" />
Here is another message about the same topic -
What is the status of the white list in the phone 1.3.0?
source
share