All rules →
Rules / Kotlin
SHIELD-KOTLIN-005

WebView addJavascriptInterface exposes native code to JS

highKotlinCWE-749CVSS 8.8

What it detects

WebView.addJavascriptInterface bridges JavaScript to native objects and can allow remote code execution on older APIs.

How to fix

Avoid addJavascriptInterface for untrusted content; if required, target API 17+ and annotate exposed methods with @JavascriptInterface.

Scan your repo freeFull documentation
Back to all rules
SHIELD-KOTLIN-005: WebView addJavascriptInterface exposes native code to JS — Zennoxa Shield