android:name="android.webkit.WebView.MetricsOptOut"
android:value="true" />
+ <!-- Explicitly disable "Safe Browsing". -->
+ <meta-data
+ android:name="android.webkit.WebView.EnableSafeBrowsing"
+ android:value="false" />
+
<!-- The theme has to be defined here or an ugly title bar is displayed when the app launches.
`android:configChanges="orientation|screenSize"` makes the activity not reload when the orientation changes, which preserves scroll location in the WebView.
`android:launchMode="singleTask"` makes the app launch in a new task instead of inside the task of the program that sends it an intent. It also makes it reuse an existing Privacy Browser activity if available instead of launching a new one.
\r
<body>\r
<h3>2.5 (version code 25)</h3>\r
- <p>26. August 2017 - Mindest-API 19, Ziel-API 25</p>\r
+ <p><a href="https://git.stoutner.com/?p=PrivacyBrowser.git;a=commitdiff;h=80ddcb075d03a4c78263d1ff80466f3df0967f6d">26. August 2017</a> - Mindest-API 19, Ziel-API 25</p>\r
<ul>\r
<li>Add <a href="https://redmine.stoutner.com/issues/54">SSL certificate pinning</a> to domain settings.</li>\r
<li>Add <a href="https://redmine.stoutner.com/issues/163">searx.me</a> to the list of search engines.</li>\r
besser auf modernen Smartphones läuft als die mobile Seite. Für diesen Zweck funktioniert PrivacyBrowser/1.0 sehr gut, da Webserver für gewöhnlich
die Desktopversion als Standardversion anzeigen, wenn sie keinen mobilen Browser als User Agent erhalten.</p>
- <p>Androids WebView erlaubt keinen leeren User Agent. Wenn das der Fall ist, wird der Standard-User Agent an den Server gesandt.</p>
+ <p>Some websites <a href="https://www.stoutner.com/user-agent-problems/">do not function correctly</a> if they do not recognize the user agent.
+ Using domain settings to set the user agent to <strong>WebView Default</strong>, or another user agent that is commonly recognized, usually resolves the problem.
+ Androids WebView erlaubt keinen leeren User Agent. Wenn das der Fall ist, wird der Standard-User Agent an den Server gesandt.</p>
</body>
</html>
\ No newline at end of file
<body>
<h3>2.5 (version code 25)</h3>
- <p>26 August 2017 - minimum API 19, target API 25</p>
+ <p><a href="https://git.stoutner.com/?p=PrivacyBrowser.git;a=commitdiff;h=80ddcb075d03a4c78263d1ff80466f3df0967f6d">26 August 2017</a> - minimum API 19, target API 25</p>
<ul>
<li>Add <a href="https://redmine.stoutner.com/issues/54">SSL certificate pinning</a> to domain settings.</li>
<li>Add <a href="https://redmine.stoutner.com/issues/163">searx.me</a> to the list of search engines.</li>
If the user agent is combined with another piece of non-unique identifying information, often it results in a unique fingerprint.
The Electronic Frontier Foundation created a tool called <a href="https://panopticlick.eff.org/">Panopticlick</a> to demonstrate how much information can be gleaned from these sources.
If this test is run with JavaScript enabled the amount of information that is disclosed increases greatly.
- <a href="https://www.browserleaks.com">Browser Leaks</a> and <a href="https://amiunique.org/">Am I Unique</a> are also good sources of information.</p>
+ <a href="https://www.browserleaks.com">Browser Leaks</a> and <a href="https://amiunique.org/">Am I Unique</a> are also good sources of information on this topic.</p>
<img class="center" src="images/panopticlick.png">
Firefox or Chrome are the most common user agents, but they auto-update and their version numbers change so quickly that it is likely the user agents included in Privacy Browser
will often be out of step with the majority of user agents in the server logs.</p>
- <p>Android’s WebView does not allow the user agent to be blank. If it is, WebView simply sends the default user agent to the server.</p>
+ <p>Some websites <a href="https://www.stoutner.com/user-agent-problems/">do not function correctly</a> if they do not recognize the user agent.
+ Using domain settings to set the user agent to <strong>WebView Default</strong>, or another user agent that is commonly recognized, usually resolves the problem.
+ Android’s WebView does not allow the user agent to be blank. If it is, WebView simply sends the default user agent to the server.</p>
</body>
</html>
\ No newline at end of file
<body>
<h3>2.5 (código de versión 25)</h3>
- <p>26 de agosto de 2017 - API mínimo 19, API dirigido 25</p>
+ <p><a href="https://git.stoutner.com/?p=PrivacyBrowser.git;a=commitdiff;h=80ddcb075d03a4c78263d1ff80466f3df0967f6d">26 de agosto de 2017</a> - API mínimo 19, API dirigido 25</p>
<ul>
<li>Añadir <a href="https://redmine.stoutner.com/issues/54">fijación de certificado SSL</a> a la configuración de dominios.</li>
<li>Añadir <a href="https://redmine.stoutner.com/issues/163">searx.me</a> a la lista de motores de búsqueda.</li>
<body>
<h3>2.5 (versione codice 25)</h3>
- <p>26 August 2017 - minima API 19, target API 25</p>
+ <p><a href="https://git.stoutner.com/?p=PrivacyBrowser.git;a=commitdiff;h=80ddcb075d03a4c78263d1ff80466f3df0967f6d">26 August 2017</a> - minima API 19, target API 25</p>
<ul>
<li>Add <a href="https://redmine.stoutner.com/issues/54">SSL certificate pinning</a> to domain settings.</li>
<li>Add <a href="https://redmine.stoutner.com/issues/163">searx.me</a> to the list of search engines.</li>
// Set `mainWebView` to load in overview mode (zoomed out to the maximum width).
mainWebView.getSettings().setLoadWithOverviewMode(true);
+ // Explicitly disable geolocation.
+ mainWebView.getSettings().setGeolocationEnabled(false);
+
// Initialize cookieManager.
cookieManager = CookieManager.getInstance();
• Add SSL certificate pinning to domain settings.
-• Add search.me to the list of search engines.
+• Add searx.me to the list of search engines.
• Update the default homepage to work with both JavaScript enabled or disabled.
• Fix a bug that caused the website title to be lost on rotate.
• Ghost the “Clear DOM Storage” options menu item if there is nothing to delete.
• Add SSL certificate pinning to domain settings.
-• Add search.me to the list of search engines.
+• Add searx.me to the list of search engines.
• Update the default homepage to work with both JavaScript enabled or disabled.
• Fix a bug that caused the website title to be lost on rotate.
• Ghost the “Clear DOM Storage” options menu item if there is nothing to delete.