Your app includes a WebView that is vulnerable to cross app scripting

Question

I Have an issue after publish app on playstore

Your app includes a WebView that is vulnerable to cross app scripting. Please see this Google Help >Center article for details.

Vulnerable classes:

com.all.in.one.shopping.app.india.activity.WebViewActivity->setupWebView

And this is my webViewActivity Code-

class WebViewActivity : AppCompatActivity() {

override fun onCreate(savedInstanceState: Bundle?) {
    super.onCreate(savedInstanceState)
    setContentView(R.layout.activity_web_view)

    setupWebView()
}

private fun setupWebView() {
    webViewFromActivity.loadUrl(intent.getStringExtra(AppConstants.WV_URL))
    webViewFromActivity.webViewClient = mWebViewClient
    webViewFromActivity.settings.javaScriptEnabled = true
    webViewFromActivity.settings.domStorageEnabled = true
    webViewFromActivity.requestFocus(View.FOCUS_DOWN)
}

private val mWebViewClient = object : WebViewClient() {
    override fun onPageStarted(view: WebView, url: String?, favicon: Bitmap?) {
        progressBar.visibility = View.VISIBLE
        super.onPageStarted(view, url, favicon)

    }

    override fun shouldOverrideUrlLoading(view: WebView, url: String?): Boolean {
        view.loadUrl(url)
        return true
    }

    override fun onPageFinished(view: WebView, url: String) {
        progressBar.visibility = View.GONE
        super.onPageFinished(view, url)
    }

is your app rejected by playstore or its just a warning ?

Swayangjit
– Swayangjit

2019-12-07 06:07:48 +00:00
Commented Dec 7, 2019 at 6:07 — Swayangjit
– Swayangjit, Commented Dec 7, 2019 at 6:07
only warning showing on playstore @Swayanfjit

Abhi Chaurasia
– Abhi Chaurasia

2019-12-07 06:20:09 +00:00
Commented Dec 7, 2019 at 6:20 — Abhi Chaurasia
– Abhi Chaurasia, Commented Dec 7, 2019 at 6:20

Swayangjit · Accepted Answer · 2019-12-07 06:55:08Z

1

Try adding the following in your manifest

<meta-data android:name="android.webkit.WebView.EnableSafeBrowsing"
android:value="true" />

answered Dec 7, 2019 at 6:55

Swayangjit

1,8812 gold badges14 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

VishalHemnani Over a year ago

This is enabled by default on all WebViews starting WebView release 66.

Mark Morgan Miranda · Accepted Answer · 2019-12-07 06:26:18Z

0

It's because of this:

webViewFromActivity.settings.javaScriptEnabled = true

answered Dec 7, 2019 at 6:26

Mark Morgan Miranda

1611 silver badge8 bronze badges

Collectives™ on Stack Overflow

Your app includes a WebView that is vulnerable to cross app scripting

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related