Overcoming Insecurities in WebViews

July 21, 2025 34 min Free

Description

This talk addresses the security vulnerabilities and misconfigurations commonly found in Android WebViews. Balázs Gerlei explores various security issues, including breakout vulnerabilities, cleartext traffic, file access, content provider access, and cookie management. The presentation emphasizes best practices for securing WebViews, such as proper configuration, restricting URI loading, and utilizing alternative solutions like Custom Tabs.