Completed
Lack of Isolation
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Securing Webviews and The Story Behind CVE-2021-21136
Automatically move to the next video in the Classroom when playback concludes
- 1 Introduction
- 2 Chef Sajan
- 3 India Mohammed
- 4 Agenda
- 5 What is a CV
- 6 Webviews
- 7 Load URL API
- 8 Deep Links
- 9 Conclusion
- 10 Mobile Application Workflow
- 11 Bug Explanation
- 12 Initial Observations
- 13 Timeline
- 14 Demo
- 15 Role of Plan
- 16 Common Webview Issues
- 17 Use Case
- 18 Code snippet
- 19 Insufficient URL validation
- 20 Issue with GetHost
- 21 Impact
- 22 Unintended Data Leakage
- 23 Sharing Sensitive Data
- 24 Lack of Isolation
- 25 LearningsRecommendations
- 26 Secure URL Validation
- 27 Webview Implementation
- 28 Android Webview Implementation
- 29 iOS Webview Implementation
- 30 iOS Webview Settings
- 31 Learnings
- 32 References
- 33 Live Slide
