This post is about a simple, yet potentially dangerous security flaw that I’ve seen several times in iOS apps. I feel this misconfiguration should have more awareness around it – specifically, developers (and bug bounty hunters) should ensure that they are handling their web view security correctly! (Leer en español) The issue is rather simple, but is often misunderstood – when setting up a webVie
![iOS Bug Hunting – Web View XSS](https://cdn-ak-scissors.b.st-hatena.com/image/square/ef4dd1aadc39a648d57801924ba74d2e28f49ff3/height=288;version=1;width=512/https%3A%2F%2Fwww.allysonomalley.com%2Fwp-content%2Fuploads%2F2018%2F12%2Fxss.jpg)