secure webview

[sanjibnanda]

how can i secure native webView.
I mean that the web view should work on phone and not on windows if some body decompiles the assets or explodes apk
Any idea or help?

 

[Erel]

Do you show a html file? You can encrypt it with RandomAccessFile.WriteObject.

 

[sanjibnanda]

Thanks Erel,

Now i have encrypted the index.html file as per your advice.
This file resides in asset folder along with other files and folder.
Next how to load it in web view after decryption from the asset folder.
please guide?

 

[Erel]

Note that you should have used RAF.WriteEncryptedObject and not WriteObject.

You should first decrypt it with RAF.ReadEncryptedObject and then use WebView.LoadHtml to load the html to WebView.

 

[sanjibnanda]

great ! it works, the decrypted html index file is loaded, but the associated js and other resources are loaded as they reside in asset folder. How come i should proceed that so that the decrypted index file (from File.DirInternalCache) could assess the relevant resources that lie in asset folder?

sanjib

 

[sanjibnanda]

edited....sorry for correction read * too
great ! it works, the decrypted html index file is not* loaded, but the associated js and other resources are loaded as they reside in asset folder. How come i should proceed that so that the decrypted index file (from File.DirInternalCache) could assess the relevant resources that lie in asset folder?

sanjib

 

[Erel]

There is an example of accessing an asset resource here:
Basic4android - Views (Core)

 

[sanjibnanda]

Extra character in WriteObject

I encrypted a JavaScript file as "dimsd.dat" with RandomAccessFile and then decrypted it as "dimsd.js",

Dim raf As RandomAccessFile
Dim raf1 As RandomAccessFile
raf.Initialize(File.DirRootExternal, "dimsd.dat", False)

fileIt = raf.ReadEncryptedObject(password, raf.CurrentPosition)
Log(fileIt)
raf1.Initialize(File.DirRootExternal, "dimsd.js", False)
raf1.WriteObject(fileIt, False, raf.CurrentPosition)
raf.Close

while using WriteObject to sdcard it has some extra characters in start of file as follows

original

function Question (qname, type, qstring, response, comment, corrects,explan,……..}

decrypted

aaafunction Question (qname, type, qstring, response, comment, corrects,explan,……..}

See some junk characters in start of file .
The Log(fileIt)is true copy but the written file on sdcard has above junk characters.

What can be the issue?
plz help

 

[Erel]

Please do not post duplicate questions.