rspec/rules/S7409/ask-yourself.adoc
2025-03-28 20:51:38 +01:00

9 lines
361 B
Plaintext

== Ask Yourself Whether
* The content in the WebView is fully trusted and secure.
* Potentially untrusted iframes could be loaded in the WebView.
* The JavaScript interface has to be exposed for the entire lifecycle of the WebView.
* The exposed Java object might be called by untrusted sources.
There is a risk if you answered yes to any of these questions.