Any major app loading any 3p TLS'd content in a WebView on Android (not using CCT or intent out to default browser) is a scandal.https://twitter.com/slightlylate/status/1104849653026086912 …
-
Show this thread
-
Replying to @slightlylate
I mean, there's a reason for them to use it. Their Facebook Pages platform + webview lets them rewrite requests for their UI framework to a permanently cached version + probably other cheats. Agreed that it isn't worth the tradeoff, but there's a reason for it.
1 reply 0 retweets 0 likes
Replying to @lmcdo_
Pages are 1p content, hosted inside the app shell, not 3p content from an outbound link. WebView for 1p is no problem. The special UI they ship for the IAB for 3p, TLS'd content? Scandalous.
8:51 AM - 11 Mar 2019
0 replies
0 retweets
3 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
& Web Standards TL; Blink API OWNER
Named PWAs w/
DMs open. Tweets my own; press@google.com for official comms.