Android

27883 readers

48 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules

1. All posts must be relevant to Android devices/operating system.

2. Posts cannot be illegal or NSFW material.

3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.

4. Non-whitelisted bots will be banned.

5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.

6. Memes are not allowed to be posts, but are allowed in the comments.

7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.

8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.

Community Resources:

We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.

Our Partner Communities:

[email protected]

founded 1 year ago

MODERATORS

[email protected]

How safe is Webview browser (self.android)

submitted 11 months ago by itsaj26744 to c/[email protected]

28 comments fedilink hide all child comments

After trying different browsers on android I found Privacy Browser to be what I need. It have encrypted backups,Domain settings,jsless by default,Deleting all site data and Most usable UI. Only issue is It is based on webview and I am using system default webview as my device is nonrooted so how secure is to go this way?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 11 months ago* (last edited 11 months ago) (1 children)

That depends on the ROM/OS. Granted, we're in the Android community, but GrapheneOS uses a hardened rendering engine, and never Chrome's/Android's even if you install them both from the Play Store:

WebView-based browsers use the hardened Vanadium rendering engine, but they can't offer as much privacy and control due to being limited to the capabilities supported by the WebView widget. For example, they can't provide a setting for toggling sensors access because the feature is fairly new and the WebView WebSettings API doesn't yet include support for it as it does for JavaScript, location, cookies, DOM storage and other older features. For sensors, the Sensors app permission added by GrapheneOS can be toggled off for the browser app as a whole instead. The WebView sandbox also currently runs every instance within the same sandbox and doesn't support site isolation.

https://grapheneos.org/usage#web-browsing

[–] [email protected] 2 points 11 months ago (3 children)

Can you install an alternative webview if you have root/magisk?

[–] [email protected] 2 points 11 months ago

Yes you can, DivestOS has one, Bromite (no longer maintained) previously did.

[–] [email protected] 2 points 11 months ago

Out of curiosity, why would you want to?

I honestly don't know as rooting and magisk go against the principles of a secure OS that GrapheneOS strives for. At that point, it is no longer GrapheneOS but GrapheneOS-derived, and the devs will not offer support... rightfully so, in my opinion.

Is it possible? I assume it is, but probably very difficult. Has someone gone through the effort to do so? Doubtful as that goes again the target audience of GrapheneOS users.