Webapps trusts all certs although i cancelled the cert warn dialogs in it the first time i used that exact webapp (badssl.com).
How to reproduce bug:
Create a new webapp for badssl.com
Save it
Close it then open it then go to dashboard of badssl.com
Cancel all certificate warning dialogs (do not accept them accidentally)
You will see everything is secure and ok.
Now open badssl webapp again, then go to dashboard.
Now webapps won't ask you for certs again and trusts them automatically, and you will see that most things are insecure.
It is also weired that this time it accepts also tls1 and tls 1.1 although i have the latest version of webview and it won't trust them when i tested with several other webview based browsers. ("Lightning" and "SmartCookieWeb (cert warns denied) and "duckduckgo".)
Also if you test compare webapps and duckduckgo browser and lightning and SmartCookieWeb with other TLS test websites (of course deny all cert warns) they show webapps accepts TLS 1 and TLS 1.1 although this version of webview disabled them and other webview based browsers don't have this problem.
hello
Webapps trusts all certs although i cancelled the cert warn dialogs in it the first time i used that exact webapp (badssl.com).
How to reproduce bug:
It is also weired that this time it accepts also tls1 and tls 1.1 although i have the latest version of webview and it won't trust them when i tested with several other webview based browsers. ("Lightning" and "SmartCookieWeb (cert warns denied) and "duckduckgo".)
Also if you test compare webapps and duckduckgo browser and lightning and SmartCookieWeb with other TLS test websites (of course deny all cert warns) they show webapps accepts TLS 1 and TLS 1.1 although this version of webview disabled them and other webview based browsers don't have this problem.
https://browserleaks.com/ssl
https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html
My webview version: Mozilla/5.0 (Linux; Android 9; (my device details removed)) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.91 Mobile Safari/537.36 Android: pie 9.0
In the end thank ypu for this great app.
Beat regards.