Anybody know if this causes issues in Cordova / Phonegap apps?
So it looks like it probably does affect Cordova apps.
edit To clarify, you need to use an association file on your website that references your app. What triggers the bug seems to be unknown, but appears to involve shared credentials.