Appraysal
Back to Rules
WARNINGLikelyGuideline SecurityGoogle PlayAndroidSafety

Insecure WebView Configuration

WebView with setJavaScriptEnabled(true) or setAllowFileAccess(true) increases attack surface.

Quick Fix

Only enable JavaScript if necessary and use a secure bridge. Disable file access unless explicitly required.

What Gets Detected

Detection Type:CODE PATTERN
Patterns detected:
setJavaScriptEnabled(true)setAllowFileAccess(true)addJavascriptInterface

Check Your App

Scan your project to see if this rule affects your app

Run Free Scan