I am working on an Android App, Using a SQLIte browser on a rooted device, the application session id cookie is being written in plain text into a SQLite table named COOKIES. I have tried some steps:
1. Using Cache-Control no-cache=\"Set-Cookie\".
2. Setting the Set-Cookie secure and httpOnly header attributes.
According to many blog entries, Chromium is suppose to encrypt cookies https://codereview.chromium.org/24734007 and indeed, I've observed an "encrypted_value" column within the COOKIES table. I read some blogs from few android developer forum related to this but unfortunately, none of the above attempts have succeeded in configuring Android WebView to encrypt stored cookies. Please help me to resolve my query.
How to configure Android WebView to encrypt cookies?
Post a Reply
Nothing to see here.
Java / Android Development
Very popular language used to create desktop applications, website applets, and Android apps.
|Bucky Roberts Administrator|