box / box/box-android-sdk

Box SDK’s auth WebView circumvents web filters

Open
#451 1 comment 0 reactions 6 assignees Claimed by @mwwoda View on GitHub
enhancement
Dominant language
Java
Stars
64
Forks
66
PR merge metrics
No merged PRs in 30d

Description

Hey Awesome People,

Our Android app uses the Box SDK and is available to EDU (Education) ChromeOS users. A client of ours submitted a ticket that demonstrated that students were able to circumvent web filters by using the Box SDK’s auth WebView to navigate to blocked sites. Details and a solution can be found at https://chromeos.dev/en/education/improving-webview-compatibility#launch-external-sites-in-the-browser

**In short, the problem would be solved if the Box SDK could provide a mechanism to redirect OAuth to use either the system browser app or a Chrome Custom Tab.**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.