Skip to content

Releases: adnxy/react-native-secure-webview

Release list

v0.1.0

v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@adnxy adnxy released this 12 Sep 06:31
v0.1.0
52594d6

Initial release of react-native-secure-webview — a Fabric-native WebView for controlled web flows (auth, checkout, OAuth redirects, 3-D Secure) with a deny-by-default navigation policy.

Highlights

  • New Architecture only — real Fabric component: WKWebView on iOS, android.webkit.WebView on Android
  • Exact origin allowlist — scheme, host, and effective port; no wildcards, enforced natively so server redirects never reach JS
  • Custom scheme interception — allow-listed schemes surface as onDeepLink events instead of loading
  • Single string-only bridge — window.ReactNativeSecureWebView.postMessage(string), main frame + allow-listed origins only
  • Fail closed — invalid config entries dropped, unknown URLs blocked, unsupported features raise errors (ephemeral_not_supported on Android, message_bridge_not_supported on old WebViews)

Install

npm install react-native-secure-webview
cd ios && pod install

Requires React Native 0.85+ with the New Architecture, iOS 15.1+, Android minSdk 24.

See CHANGELOG.md for details and SECURITY.md for the threat model.

📦 npm: https://www.npmjs.com/package/react-native-secure-webview

Assets 2
Loading