0
votes
1answer
144 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...
2
votes
1answer
54 views

How to get rid of this orange highlighter

Recently I've noticed a really annoying orange highlighting feature that I can't find a way to get rid of. It usually appears in the default browser and apps that use webview (websites that act like ...
1
vote
0answers
486 views

Browser webview.db doesn't store hotmail password, but I can still auto log-in hotmail. Why?

On my rooted Galaxy Nexus 4.1.1, stock browser doesn't store any password for hotmail, but whenever I open hotmail, it log-in automatically. I checked data/data/com.android.browser/webview.db, the ...
1
vote
0answers
363 views

why big sized images.show at low resolution in webview?

Example: http://imgs.xkcd.com/comics/up_goer_five.png Opening that xkcd comic will show it in such a lower resolution on my nexus one that i can't even read the text. Edit: This happens regardless ...