tomayac’s avatartomayac’s Twitter Archive—№ 11,877

  1. To add some context to @slightlylate’s quoted tweet ⤵️: the issue is the shouldInterceptRequest method ( developer.android.com/reference/android/webkit/WebViewClient.html#shouldInterceptRequest(android.webkit.WebView,%20android.webkit.WebResourceRequest)) that essentially allows any app to intercept (MITM) and rewrite traffic, even if loaded over HTTPS. Use ChromeCustomTabs, folks! Distrust WebView! x.com/slightlylate/status/1104964835362529283
    On twitter.com Twitter logo tomayac’s avatar ♻️ 16 Retweets ❤️ 33 Favorites Mood -3 🙁