Skip to content
/ Android-SSL-Pinning-WebViews Public

A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews

106 stars 19 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

menjoo/Android-SSL-Pinning-WebViews

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
app
app
 
 
gradle/wrapper
gradle/wrapper
 
 
.gitignore
.gitignore
 
 
README.md
README.md
 
 
build.gradle
build.gradle
 
 
gradle.properties
gradle.properties
 
 
gradlew
gradlew
 
 
gradlew.bat
gradlew.bat
 
 
settings.gradle
settings.gradle
 
 

Repository files navigation

Certificate pinning and scheme/domain whitelisting in Android WebViews

A simple demo app that demonstrates:

  • Certificate pinning in Android WebViews
  • Scheme and domain whitelisting in Android WebViews

The pinning and whitelisting is achieved on network level with OkHttp. WebView is then secured by extending WebViewClient and using OkHttp for the requests.

The solution has a performance drawback: By extending WebViewClient and overriding shouldInterceptRequest, all requests are performed sequentially which hurts the loading times. Please let me know if there is a solution for this.

About

A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews

Topics

android security webview android-webview security-hardening ssl-pinning certificate-pinning whitelisting public-key-pinning

Resources

Readme
Activity

Stars

106 stars

Watchers

8 watching

Forks

19 forks
Report repository

Releases

No releases published

Packages

No packages published

Contributors 2

  •  
  •  

Languages