Mobility

Cross-site Scripting Attacks on Android WebView

Date Added: Apr 2013
Format: PDF

WebView is an essential component in Android and iOS. It enables applications to display content from on-line resources. It simplifies task of performing a network request, parsing the data and rendering it. WebView uses a number of APIs which can interact with the web contents inside WebView. In the current paper, Cross-site scripting attacks or XSS attacks specific to Android WebView are discussed. Cross-Site Scripting (XSS) is a type of vulnerability commonly found in web applications. This vulnerability makes it possible for attackers to run malicious code into victim's WebView, through Http Client APIs. Using this malicious code, the attackers can steal the victim's credentials, such as cookies.