abdelnasser·22h agoOne Deep Link, Zero Validation, Full ATO (Again)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoIntent Redirection to One-Click Account Takeover (But It’s a Duplicate)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoOne-Click Account Takeover via WebView Auth Header Injection to Claimable Whitelisted Domainبِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
Recline Social·Oct 25WebView vs Native Desktop Apps: Does It Actually Matter for Chat Software?Why we’re comparing Tauri, WinUI 3, and native desktop development while building Recline.
Shambhukapadi·Oct 23Part 3: Mastering App Components, Deep Links & WebViews1. Activities: The Front Door of Every App
Pouria Rezaie·Oct 20Downloading Blob Files in Android WebView: A Kotlin and JavaScript Bridge ApproachHow our Android shell converts browser-managed files into native downloads — and what the implementation taught us
Alim Reshitov·Sep 27Hardening WebView for Payment Flows: JS Bridges, File Access, and 3-D SecureThe one component in a banking app that renders arbitrary third-party HTML and JavaScript by design — and how to keep it on a short leash
Mohammad Haidar·Sep 10Our Test Runner Couldn’t See Inside a WebView. Then We Gave It AI.Test IDs are a nightmare in a hybrid app, and in some containers there is nothing to attach one to. We added AI selectors to our test…A response icon1A response icon1
Android Expert·Aug 19Beyond addJavascriptInterface: Building a Secure, Maintainable WebView BridgeA practical guide to threading, security, and production pitfalls in Android’s JS-to-native bridge.A response icon1A response icon1
Abdulrahman Mohamed·Aug 11Flutter WebView and Deep Link Security: The Doors You Left OpenFlutter Under the Hood, Part 7 of 9: WebView bridges, deep links and exported components. The attack surface that has nothing to do with…
