4 ms·

I thought Facebook/Instagram used a WebView for their in-app browser on both iOS and Android? Which means they can do anything they want, including exfiltrate y

by jefftk 4y ago

I thought Facebook/Instagram used a WebView for their in-app browser on both iOS and Android? Which means they can do anything they want, including exfiltrate your browsing.

ezfe 4y ago
I meant "of course Facebook doesn't [use Safari View Controller]". WebView ≠ Safari View Controller. Safari View Controller keeps the users cookies from Safari and prevents this behavior. For most apps, keeping users logged in without leaving the app is preferred, so they give up the ability to inspect the contents of the page.
- jefftk 4y ago
  Sorry, rereading your comment that's exactly what you said and I just misread!
- saagarjha 4y ago
  > Safari View Controller keeps the users cookies from Safari It does not, because apps decided to abuse it for fingerprinting.
wonderbore 4y ago
GP a was referring to a specific “web view” implementation that offers an almost-complete browser implementation and security on iOS. Facebook does not use this but a regular WebView