Assurance SDK does not need the WebView to allow a file scheme URL to access other file scheme URLs. We do not setAllowFileAccess value explicitly to false. For applications targeting API 29 and below this defaults to true if not explicitly set. So set this flag to false to tighten access.
Assurance SDK does not need the WebView to access content data on the device. We do not explicitly set the setContentAccess value to false. Set this flag to false to tighten access.
Related Issue
Internal (MOB-20935, MOB-20934)
Motivation and Context
Some changes to ensure we tighten access from Assurance WebView.
How Has This Been Tested?
Verified that PIN and QuickConnect succeed with changes on API 21, API 29 and API 34.
Screenshots (if appropriate):
Types of changes
[ ] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)
Description
Assurance SDK does not need the WebView to allow a file scheme URL to access other file scheme URLs. We do not
setAllowFileAccessvalue explicitly to false. For applications targeting API 29 and below this defaults to true if not explicitly set. So set this flag to false to tighten access.Assurance SDK does not need the WebView to access content data on the device. We do not explicitly set the
setContentAccessvalue to false. Set this flag to false to tighten access.Related Issue
Internal (MOB-20935, MOB-20934)
Motivation and Context
Some changes to ensure we tighten access from Assurance WebView.
How Has This Been Tested?
Screenshots (if appropriate):
Types of changes
Checklist: