Note that whitelist only applies to resources loaded from file: resources

It would be helpful to note in the Domain Whitelisting Guide that the whitelisted domains only apply to resources loaded from file: resources.

For example, if cordova app redirects to a remote URL, and the remote page tries to make a cross-domain request to a whitelisted resource, the request will fail the same way it would in a normal browser.