Loading a page returned by a remote server in webview in android, can the js in this page interact with android local code?
android: This is achieved by directly injecting native js code into the webview page and using the addJavascriptInterface method.
ios: ios UIWebView itself has the stringByEvaluatingJavaScriptFromString method implementation, which returns the execution result of the js script
The js in the webview page can call each other with Android's local java. The implementation method is slightly different for different Android versions. You can search for the specific topic. There are many examples.
It shouldn’t be possible, just imagine, your App
打開任意url
都可以對(duì)其注入JS
代碼,那還有什么安全可言?
調(diào)用Web支付接口
的時(shí)候,順便把Cookie、Session
什么的往自己服務(wù)器上發(fā)一份?
雖然Chrome插件
can do this[/squinting smile].