diff options
Diffstat (limited to 'app/src/main/java/org/terst/feedreader')
| -rw-r--r-- | app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt b/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt index de9416b..f26a35c 100644 --- a/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt +++ b/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt @@ -97,7 +97,13 @@ fun BrowserScreen(startUrl: String, onBack: () -> Unit) { settings.javaScriptEnabled = true settings.domStorageEnabled = true CookieManager.getInstance().setAcceptCookie(true) - CookieManager.getInstance().setAcceptThirdPartyCookies(this, true) + // Deliberately NOT setAcceptThirdPartyCookies: the login-persistence + // feature this screen exists for (see the class doc comment) only + // needs a site's own FIRST-party session cookie to reach the + // extraction WebView -- third-party cookies are for cross-site + // trackers embedded within whatever page is loaded here, which this + // feature has no use for and which only adds tracking surface shared + // with every other WebView in the app. webViewClient = object : WebViewClient() { override fun onPageFinished(view: WebView, url: String) { title = view.title |