Hacker News new | ask | show | jobs
by marionauta 1090 days ago
It's possible. I remember one app that opened a webview to their terms of use page, which somewhere had a link to a Google page, which I could use to go to Google search. So, no direct URL input, but you could go to any website indexed.
2 comments

IIRC webview, by default, requires a dev to whitelist domains. Maybe that has changed, IDK.

But finding an example where you can navigate elsewhere is not proof that all webviews are broken; maybe they have this "security issue" by default and allow a dev to tighten it (bad sec. practice IMO), and maybe android versions or SDK-versions differ in how they adhere, IDK. But the times that I encountered this and fiddled with it, it was a PIAS to even allow loading a page from another domain.

Or find a website like the mobile JS console people mentioned in this thread to link yourself anywhere, indexed or not