WebView Vulnerabilities

A WebView is a browser the app embeds and bridges into its own code — and that bridge is where it goes wrong. addJavascriptInterface hands JavaScript a door into Java; file:// with universal-access turned on lets a loaded page read the whole sandbox; and any page loaded over cleartext or from an attacker-controlled origin gets all of it. How each WebView weakness works, how to trigger it on your own build, and the settings that make a WebView safe.