26
How safe is Webview browser (programming.dev)
submitted 11 months ago by itsaj26744@programming.dev to c/android@lemmy.world
28 comments fedilink hide all child comments

After trying different browsers on android I found Privacy Browser to be what I need. It have encrypted backups,Domain settings,jsless by default,Deleting all site data and Most usable UI. Only issue is It is based on webview and I am using system default webview as my device is nonrooted so how secure is to go this way?

all 29 comments
sorted by: hot top controversial new old
[-] jacktherippah@lemmy.world 16 points 11 months ago* (last edited 11 months ago)

From https://divestos.org/pages/browsers : While WebView browsers utilize the Chromium WebView, they cannot offer any per-site process isolation. Using any WebView-based browser is largely not recommended as they are inherently limited due to the WebView merely being a widget for adding web content to an app and are not intended to create a full browser experience. TLDR: Don't use WebView browsers.

[-] drwankingstein@lemmy.dbzer0.com 8 points 11 months ago

what do you mean by secure, as far as "is it safe to use this browser" then yes, webview is reasonably secure, it's still running chrome. you have all of the security benefits and everything else, wont have to worry too much about malware or anything else. however if you mean by private then well, it's chrome. everything that sketches people out about chrome is all there too

[-] itsaj26744@programming.dev -1 points 11 months ago

So will it send tracking info to google?

[-] evo@sh.itjust.works 6 points 11 months ago

Google literally blocks login via the webview for security reasons.

[-] eequalsmc2@lemdro.id 4 points 11 months ago

https://www.stoutner.com/webview-devtools/

[-] stifle867@programming.dev 4 points 11 months ago

Everyone's debating the merits of WebView but I find a browser made by CoinBase, Inc who operates a crypto platform advertising 8% APY to be way more dubious than the battle-tested Chromium browser engine.

[-] itsaj26744@programming.dev 1 points 11 months ago

Link for browser as I cant find it

[-] stifle867@programming.dev 3 points 11 months ago

Link for browser? You're the one that says you're using the app Privacy Browser!

If you mean about the 8% APY thing you can find it like so:

https://play.google.com/store/apps/details?id=com.coincircle

[-] itsaj26744@programming.dev 1 points 11 months ago

I am saying Privacy browser not private browser

[-] stifle867@programming.dev 3 points 11 months ago

Ah I see. My bad! That looks much more reasonable, some cool features.

[-] WeLoveCastingSpellz@lemmy.dbzer0.com 4 points 11 months ago* (last edited 11 months ago)

It is basically chrome, I use Mulch System Webview

[-] db2@sopuli.xyz 2 points 11 months ago

Webview is whatever version of Chrome you have installed, so not very.

[-] FutileRecipe@lemmy.world 5 points 11 months ago* (last edited 11 months ago)

That depends on the ROM/OS. Granted, we're in the Android community, but GrapheneOS uses a hardened rendering engine, and never Chrome's/Android's even if you install them both from the Play Store:

WebView-based browsers use the hardened Vanadium rendering engine, but they can't offer as much privacy and control due to being limited to the capabilities supported by the WebView widget. For example, they can't provide a setting for toggling sensors access because the feature is fairly new and the WebView WebSettings API doesn't yet include support for it as it does for JavaScript, location, cookies, DOM storage and other older features. For sensors, the Sensors app permission added by GrapheneOS can be toggled off for the browser app as a whole instead. The WebView sandbox also currently runs every instance within the same sandbox and doesn't support site isolation.

https://grapheneos.org/usage#web-browsing

[-] lemmyvore@feddit.nl 2 points 11 months ago

Can you install an alternative webview if you have root/magisk?

[-] FutileRecipe@lemmy.world 2 points 11 months ago

Out of curiosity, why would you want to?

I honestly don't know as rooting and magisk go against the principles of a secure OS that GrapheneOS strives for. At that point, it is no longer GrapheneOS but GrapheneOS-derived, and the devs will not offer support... rightfully so, in my opinion.

Is it possible? I assume it is, but probably very difficult. Has someone gone through the effort to do so? Doubtful as that goes again the target audience of GrapheneOS users.

[-] Cheradenine@sh.itjust.works 2 points 11 months ago

Yes you can, DivestOS has one, Bromite (no longer maintained) previously did.

[-] jacktherippah@lemmy.world 2 points 11 months ago* (last edited 11 months ago)

This mentality of Google = bad and FOSS = good and secure is harmful.

[-] drwankingstein@lemmy.dbzer0.com 3 points 11 months ago

nah, there are legitimate concerns around chrome's privacy stuff, a lot of people would be fine if they could run cromite or one of the privacy centric forks. the main issue is that vendors for some reason lock down webview to the google play store provider. I presume this is due to some false security notion around a bad webview being installed. but that would be a lot of steps so...

[-] itsaj26744@programming.dev 1 points 11 months ago

Android system webview is a different app and chrome is removed from my current user?

[-] db2@sopuli.xyz 1 points 11 months ago

Sure thing. ๐Ÿ‘

[-] itsaj26744@programming.dev 1 points 11 months ago

What sure

[-] db2@sopuli.xyz 1 points 11 months ago

It's still Chrome and it's only technically a different app unless you've rooted your phone to replace it.

[-] itsaj26744@programming.dev 1 points 11 months ago

Got it

this post was submitted on 23 Nov 2023
26 points (82.5% liked)

Android

27934 readers
17 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules

1. All posts must be relevant to Android devices/operating system.

2. Posts cannot be illegal or NSFW material.

3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.

4. Non-whitelisted bots will be banned.

5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.

6. Memes are not allowed to be posts, but are allowed in the comments.

7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.

8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.

Community Resources:

We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.

Our Partner Communities:

!android@lemmy.ml

founded 1 year ago
MODERATORS
MargotRobbie@lemmy.world
Rooki@lemmy.world
Thekingoflorda@lemmy.world
L3s@lemmy.world
_MoveSwiftly@lemmy.world