rspec/rules/S7409/ask-yourself.adoc

9 lines
361 B
Plaintext
Raw Normal View History

== Ask Yourself Whether
* The content in the WebView is fully trusted and secure.
* Potentially untrusted iframes could be loaded in the WebView.
* The JavaScript interface has to be exposed for the entire lifecycle of the WebView.
* The exposed Java object might be called by untrusted sources.
There is a risk if you answered yes to any of these questions.