ioswebviewsafe-browsing

do ios webviews check urls for malware before opening them?

If I open arbitrary urls in my ios application, will I have to do my own malware/phishing/etc... checks? Does the webview (implicitly) do any work on my behalf (or would i have to switch a setting somewhere?)?

Solution

  • In short: no.

    UIWebView only has some restricts about javascript same-origin policy, and iOS has it's own SSL Certificates Validation (TLS Chain Validation) which can help UIWebView a little bit safe.

    If you want to check malware, phisinng, ... you're free to do it.