In-app browser security? Are cookies, javascript, flash enabled? - Android Q&A, Help & Troubleshooting

Just what the title says. I can't find much documentation about the security of an in-app browser vs. that of Firefox beefed up with html5, noscript, https everywhere, ublock. Assuming javascript and flash are indeed enabled and there is no option to disable them, could there be a solution similar to AdAway that can block these elements below the app level?

delete

delete

Related

Adfree block some websites

I installed adfree in my nexus 5 but this block some webs and I can't enter in this webs, how can I change this?
That's the intended behavior. Disable Adfree and restart, or use a proxy (e.g. Opera Mini/Off-Road mode) to bypass this.
No, it is block the ads not the web
yeiyei0891 said:
No, it is block the ads not the web
Click to expand...
Click to collapse
You don't understand how it works. A very simple explanation is offered on their website:
http://adfree.bigtincan.com/about.php
Advertising hostnames are simply redirected to the local host (so no "webs" as you so eloquently put it) regardless of where the hostname is being requested from (your browser or your app containing ads.) That's the way the hosts file works (you can Google that for more information if you want.)
There are a few alternatives: you can block internet access for the apps with ads using a firewall (e.g. AFWall+) or use something like xad.
EDIT: Of course, you can just remove the website you want to visit from the hosts file yourself. Some ad blocking apps like AdAway allow you to do that from within the app itself (whitelist.)

[App] iOS Safari browser

Link: https://play.google.com/store/apps/details?id=com.granitamalta.cloudbrowser
Cloud Browser is a fast Android browser. Cloud browser is inspired from iOS's Safari for its user interface. By using iOS Safari as an inspiration, we were able to develop a natural and modern user interface aimed at making our users' life easier.
Speed: Cloud Browser is without a doubt one of the fastest browsers on Android.
Security: Cloud Browser has Icognito mode built in so if you need to browse the web anonymously, you know you can do it with Cloud Browser. Also, our browser sports the latest in data encryption methods so you know you are safe when browsing with Cloud Browser.
Productivity: Cloud Browser is very easy to understand and use, thus making migrating from other web browser an easy and painless process. You can even use the built in option to import bookmarks from other web browsers.
Works excellent whether on phone or tablet: Cloud Browser has been designed with both phones as well as tablets in mind from the very beginning and thus looks good whether it is being used on your phone or else on your tablet.Link: https://play.google.com/store/apps/details?id=com.granitamalta.cloudbrowser
Cloud Browser is a fast Android browser. Cloud browser is inspired from iOS's Safari for its user interface. By using iOS Safari as an inspiration, we were able to develop a natural and modern user interface aimed at making our users' life easier.
Speed: Cloud Browser is without a doubt one of the fastest browsers on Android.
Security: Cloud Browser has Icognito mode built in so if you need to browse the web anonymously, you know you can do it with Cloud Browser. Also, our browser sports the latest in data encryption methods so you know you are safe when browsing with Cloud Browser.
Productivity: Cloud Browser is very easy to understand and use, thus making migrating from other web browser an easy and painless process. You can even use the built in option to import bookmarks from other web browsers.
Works excellent whether on phone or tablet: Cloud Browser has been designed with both phones as well as tablets in mind from the very beginning and thus looks good whether it is being used on your phone or else on your tablet.

"Sign-in to network" panel not fully functional for Web browsing

Not sure if I’m on-topic here or not, but here goes... I am responsible for the setup/configuration of WiFi routers in various restaurants and venues. We are simply using the built-in splash page functionality of the router to, upon connection, present a simple marketing message and daily special offer via an extremely simple, static external HTML page, rather than the login page that many venues present (airports, coffee shops, McDonalds, etc.).
After connecting to our SSID with a PC or mobile device, users are presented with a customized splash page where our venue’s latest “offer of the day” banner ad is presented, which links via a standard hyperlink out to a PDF coupon for them to redeem said offer. There are also a couple of other simple items on the page, such as a menu with links to other offers, and an embedded Google Map to the venue in question.
All seems to be OK on PCs and iPad/iPhone devices. However, we are running into a problem on Android devices – specifically, Android devices using newer/more recent versions of the Android OS.
The problem is that Google has made a change to newer versions of Android so that WiFi connection login/splash/confirmation pages no longer come up in the default Web browser of the phone/tablet in question. Instead, they seem to come up in some kind of built-in notification window simply titled “Sign-in to network” – it does not seem to be a full-blown, feature-compliant browser, but rather a panel of sorts built into Android. And when our basic, mainly static HTML page loads within this alert window, none of the standard HTML features (such as hyperlinks) seem to work. A window appears with the title “Sign-in to network”, and our splash page appears on within it, but the standard HTML hyperlink from our special offer graphic (to a PDF file) does not work. Clicking it has no effect. Our menu underneath that does not seem to open (it’s automatically collapsed on mobile devices), and none of the links within it work properly, and our embedded Google Map does not appear at all. It’s as if this alert window or whatever we call it does not support the basic features of HTML pages in any way.
There appears to be no way for me to programmatically force the Android client to “escape” from this proprietary panel and open up a page in their default browser. I’ve tried placing various forms of client and server side “push/redirect” code on the page in an effort to escape from this alert window and cue the default browser to open, with no luck. No matter what I do, it seems that they Android phones always load the splash page within a “sign-in to network” notification page rather than a browser, and that this notification panel is not fully functional for even basic HTML features such as <a> hyperlinks, javascript, or embedded items.
It’s possible that Android’s proprietary “sign-in to network” panel is apparently seeking some sort of acknowledgement of a successful "login" in order to proceed with any subsequent browsing. But if so, I don’t know what constitutes “acknowledgement”. Perhaps there some way to force a hidden form submission or link click programmatically to force the Android device to accept/acknowledge the connection just as if the user had logged in normally, so that we can then proceed to subsequent Web browsing?
Has anyone experienced this problem, or have any ideas as to whether there’s a work-around or coding-based solution to this difficulty?
Thanks very much for your help in advance.
UPDATE: I've been in touch with the Google developers of the sign-in panel... they indicated that "captive portal sign-in pages are displayed in an Android WebView, which uses much of the same code as the Chrome browser. The sign-in app is very simple, you can see all of its source code here.
One second after each navigation (including the initial page load), the app probes to see if the user has successfully signed into the network. This probe is done by fetching a URL that should give back a 204 response."
Based on this, I am making the assumption that until captive portal sign-in app probes to see if the user is successfully signed in, all other navigation and many other features on the page are disabled, and that the full functionality of the WebView panel is restored after a successful sign-in to the network. But if so how can I successfully "signal" to the sign-in app that the user is, in fact, signed in (or rather, that no sign is in necessary or desired)? Is there something programmatically that I can do in the page code to ensure this, so that the viewer can then proceed to normal Web navigation within the panel, and so forth?
Any insight into how this works from anyone here would be greatly appreciated!
Thanks!

Problems about HTML5 quick app

1. How can I implement SSO for an HTML5 app? For example, what can I do if I want to allow a user who has signed in to HTML5 app A using an account to sign in to another HTML5 app automatically using the same account?
HTML5 apps support the SSO capability. You only need to ensure that the app package names of the two HTML5 apps end with h5.generated.
2. Is the running status of an HTML5 quick app on a mobile phone with GMS installed the same as that with HMS Core installed? Do users have different experience?
An HTML5 quick app uses the web component to load an HTML5 URL. The web component is equivalent to the WebView component in Android. Huawei WebView is compatible with Android. Web-related attributes in quick app code are available in Android WebView. Therefore, user experience is the same in theory.
3. Can I open a quick app using a URL? What are the differences between the URL of an HTML5 quick app and a common web page URL?
Yes. You can start a quick app by embedding a deeplink for redirection.
They have no difference. Theoretically, the URL of a common web page can be opened using the quick app web component.
4.Can I remove the lightning icon in the lower right corner of the quick app home screen? Can I display only the icon like a common app?
The lightning icon is fixed in the product design and cannot be removed.
How In-App Purchase works in Quick App ?

Built in Web Browser blocks sites

There is some sort of built-in web browser on this phone and it's not good. It block access to 'unsafe' ports, so I cant login to public Wifi that has a landing page. Anytime there is a hotlink that needs a web page, this stupid browser comes up despite having other browsers set as default. Is there anyway to disable this system web browser?
I have edited your thread title to remove the obvious reproductive anatomical connotation. Your posts must be acceptable to the general public.

Categories

Resources