Box SDK’s auth WebView circumvents web filters
Open
enhancement
- Dominant language
- Java
- Stars
- 64
- Forks
- 66
- PR merge metrics
- No merged PRs in 30d
Description
Hey Awesome People,
Our Android app uses the Box SDK and is available to EDU (Education) ChromeOS users. A client of ours submitted a ticket that demonstrated that students were able to circumvent web filters by using the Box SDK’s auth WebView to navigate to blocked sites. Details and a solution can be found at https://chromeos.dev/en/education/improving-webview-compatibility#launch-external-sites-in-the-browser
**In short, the problem would be solved if the Box SDK could provide a mechanism to redirect OAuth to use either the system browser app or a Chrome Custom Tab.**
Contributor guide
Assessment
This issue has not been assessed yet.