[Security] Bump cordova-plugin-ionic-webview from 1.1.19 to 2.2.0

[dependabot-preview]

Bumps cordova-plugin-ionic-webview from 1.1.19 to 2.2.0. This update includes security fixes.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

High severity vulnerability that affects cordova-plugin-ionic-webview
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.

Affected versions: < 2.2.0

Changelog

Sourced from cordova-plugin-ionic-webview's changelog.

2.2.0 (2018-10-04)

• Fix issue where two apps running on the same port could conflict with each other (#169 & #186)
• Add kitkat support (API 19) (#144) @​leo6104
• Fix issue where local server was being used if launch URL is external (#169)

2.1.4 (2018-09-13)

• Allow Ionic Deploy DisableDeploy preference to disable loading of deploy updates (#172)

2.1.3 (2018-09-06)

• Make server path relative (#164)

2.1.2 (2018-09-05)

• Return 404 response when file doesn't exist (#162)
• Load local assets if the app is a freshly installed binary (#155)
• Reset stored server path on new binary (#161)

2.1.1 (2018-09-04)

• Allow range requests for local files (#154)

2.1.0 (2018-08-23)

• Add support for cordova-android 6 (#150)

2.0.3 (2018-08-14)

• Fix nil reference by setting up the server URL before routes are set up. (#135) @​matejkramny
• Resolve issue when app is launched in background. (#124) @​ghenry22

2.0.2 (2018-07-30)

• Immediately load new server base path upon setting it. (#132)

2.0.1 (2018-07-25)

• Avoid "not modified" response on iOS by always overriding last modified date. (#127)

... (truncated)

Commits

• 4b98e6b 2.2.0
• ff8c5a7 update changelog & bump down version as it's managed by release script
• 44beccc no more --yolo on deploy script
• 2b9e22a Internal connections only (#186)
• 67da7b9 Wrap callbackFromNative in Promise.resolve (#171)
• 242465a 2.1.4
• e61b895 docs(changelog): update changelog for v2.1.4 release
• a1664d8 Allow to disable deploy updates with DisableDeploy preference (#172)
• 17b5de5 docs(changelog): update changelog for #169
• 7d0c113 fix: if launch url is external don't load local server (#169)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nhyatt, a new releaser for cordova-plugin-ionic-webview since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.