Crossing security domains
Crossing security domains
Posted Jun 12, 2025 8:50 UTC (Thu) by farnz (subscriber, #17727)In reply to: Crossing security domains by wahern
Parent article: Covert web-to-app tracking via localhost on Android
That proposal does, unfortunately, run into the "prompt for insecurity" problem, which means that it doesn't fully block the described exploit - not least because sites using the exploit could socially engineer their way to local network access.
It's a distinct improvement, however.