Skip to content

A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews

Notifications You must be signed in to change notification settings

menjoo/Android-SSL-Pinning-WebViews

Repository files navigation

Certificate pinning and scheme/domain whitelisting in Android WebViews

A simple demo app that demonstrates:

  • Certificate pinning in Android WebViews
  • Scheme and domain whitelisting in Android WebViews

The pinning and whitelisting is achieved on network level with OkHttp. WebView is then secured by extending WebViewClient and using OkHttp for the requests.

The solution has a performance drawback: By extending WebViewClient and overriding shouldInterceptRequest, all requests are performed sequentially which hurts the loading times. Please let me know if there is a solution for this.

About

A simple demo app that demonstrates Certificate pinning and scheme/domain whitelisting in Android WebViews

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages