您的应用包含易受跨应用脚本攻击的 WebView

Question

我在 playstore 上发布应用后遇到问题

Your app includes a WebView that is vulnerable to cross app scripting. Please see this Google Help >Center article for details.

Vulnerable classes:

com.all.in.one.shopping.app.india.activity.WebViewActivity->setupWebView

这是我的webViewActivity代码-

class WebViewActivity : AppCompatActivity() {

override fun onCreate(savedInstanceState: Bundle?) {
    super.onCreate(savedInstanceState)
    setContentView(R.layout.activity_web_view)

    setupWebView()
}

private fun setupWebView() {
    webViewFromActivity.loadUrl(intent.getStringExtra(AppConstants.WV_URL))
    webViewFromActivity.webViewClient = mWebViewClient
    webViewFromActivity.settings.javaScriptEnabled = true
    webViewFromActivity.settings.domStorageEnabled = true
    webViewFromActivity.requestFocus(View.FOCUS_DOWN)
}

private val mWebViewClient = object : WebViewClient() {
    override fun onPageStarted(view: WebView, url: String?, favicon: Bitmap?) {
        progressBar.visibility = View.VISIBLE
        super.onPageStarted(view, url, favicon)

    }

    override fun shouldOverrideUrlLoading(view: WebView, url: String?): Boolean {
        view.loadUrl(url)
        return true
    }

    override fun onPageFinished(view: WebView, url: String) {
        progressBar.visibility = View.GONE
        super.onPageFinished(view, url)
    }

Answer 1

是因为：

webViewFromActivity.settings.javaScriptEnabled = true

Answer 2

尝试在清单中添加以下内容

<meta-data android:name="android.webkit.WebView.EnableSafeBrowsing"
android:value="true" />

您的应用包含易受跨应用脚本攻击的 WebView

Your app includes a WebView that is vulnerable to cross app scripting

android

android-webview