Hacker Read

Kiro | karma 10888 | avg karma 1.51 · 2014-09-25 17:44:45

What rendering engine are you using?

nubela | karma 1444 | avg karma 3.65 · 2014-09-25 17:47:31+00:00

AOSP webview

higherpurpose | karma 4162 | avg karma 1.43 · 2014-09-25 17:52:07+00:00

Did you fix this? (should be fixed in 4.4+ webview, I think, if that's what you're using for all supported devices)

https://community.rapid7.com/community/metasploit/blog/2014/...

reply

aeling | karma 105 | avg karma 2.84 · 2014-09-25 19:57:59+00:00

Just tested (using ejj.io/SOP.php), Javelin on my Note 3 isn't vulnerable.

andybak | karma 19613 | avg karma 3.44 · 2014-09-25 17:55:11+00:00

So this will automatically be Chrom(ium) on newer versions of Android?

nubela | karma 1444 | avg karma 3.65 · 2014-09-25 17:59:16+00:00

Yeap, it is already Chromium WebView since 4.4 :) But the performance lags behind bleeding edge Chrome since Google gives its own Chrome a more advanced version of Chromium WebView.

charleslmunger | karma 1041 | avg karma 2.97 · 2014-09-25 18:54:28+00:00

You can build and link in chromium's webview if you want.

zethraeus | karma 596 | avg karma 3.14 · 2014-09-25 19:37:51+00:00

Lags behind Chrome in general in that AndroidWebview doesn't gets single process Chromium, right?

zethraeus | karma 596 | avg karma 3.14 · 2014-09-25 22:05:34+00:00

*multiprocess

cturhan | karma 203 | avg karma 1.41 · 2014-09-25 21:02:54+00:00

How did you handle file chooser? As far as I know, WebView disabled fileChooser by 4.4 [1]. This is a problem which we came across today.

[1] http://stackoverflow.com/a/21436901/856702

reply

nikils | karma 217 | avg karma 3.5 · 2014-09-26 02:27:18

Why not create a different rendering engine and replace HTML,CSS, JS ?