I know I could disable JavaScript in most Browsers. Is one able to disable it for WebViews also? I mean every App could specify its own WebView and is able to turn JavaScript on/off inside their app and they could inject JavaScript that infects my phone somehow. I'm aware that this WebView may lose its function or behave in an unexpected way. If it matters I have a Galaxy Nexus with JellyBean.
-
nothing can infect your phone if it's not root,especially Java Script.– Mohamed EssamCommented Sep 14, 2012 at 19:57
-
2WebView is usually used to display web pages that the app developer has predefined, if you don't trust the app developer only giving you trusted web pages, you have a bigger problem, why do you have that app installed in the first place? The app is more dangerous than the web view.– Lie RyanCommented Sep 16, 2012 at 5:23
-
Also, since Android apps runs in sandbox it has a very good security, the worst an injected script can do is run amok with the apps data, and even that is only if the app developer had allowed them to do that. Given there's four layers of security, the JavaScript sandbox, WebView sandbox, app sandbox, and kernel security; you don't really have much to be worried about with malicious JavaScript. WebView isn't IE.– Lie RyanCommented Sep 16, 2012 at 5:39
-
shure, I understand all these. I just thought, that it might be, that a devolper kind of "outsources" his malicious Code inside JavaScript, so no-one who is checkin the source of the App will find something supect.– Rafael TCommented Sep 16, 2012 at 15:41
-
Javascript is a totally sandboxed environment - in fact, there are limitations with Javascript - cannot access files, and is contained, so there is very little chance of a javascript exploit that will cause your phone to boot-loop or reboot...– t0mm13bCommented Sep 19, 2012 at 14:04
Add a comment
|
1 Answer
If the developer do not give you access to the (Web)Settings of the WebView, you will not be able to disable JavaScript in the WebView.
