Join GitHub today
GitHub is home to over 20 million developers working together to host and review code, manage projects, and build software together.
automatically add MPROTECT exceptions for apps enabling WebView JavaScript support #18
Comments
thestinger
added
the
Type: enhancement
label
Aug 23, 2015
ghost
referenced this issue
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment|
This is now implemented. |
thestinger
closed this
Aug 26, 2015
thestinger
added this to the Beta release milestone
Aug 26, 2015
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
thestinger commentedAug 23, 2015
Applications calling
setJavaScriptEnabled(true);on the WebView are by far the most common source of issues requiring PaX exceptions. It would be great to deal with this automatically by having the package manager scan the bytecode for a call to thesetJavaScriptEnabledmethod. It should be done in the regular Java package manager code with a dumb heuristic rather than relying on something like a bytecode parser which would add attack surface.