WebView Is Still a Mess: Android Hybrid Apps Keep Repeating the Same Security Mistakes
WebView remains one of the most productive Android AppSec targets because hybrid apps repeatedly mix trusted native capabilities with untrusted or weakly controlled web content.
