I am getting a lint error when I call WebView.addJavaScriptInterface even though I wrap it in a check to make sure that it only runs on API 17 or above. The lint description says
WebView.addJavascriptInterface should not be called with minSdkVersion < 17 > for security reasons: JavaScript can use reflection to manipulate > application While the documentation at http://developer.android.com/reference/android/webkit/WebView.html#addJavascriptInterface(java.lang.Object, java.lang.String) says > The most secure way to use this method is to target JELLY_BEAN_MR1 and to > ensure the method is called only when running on Android 4.2 or later. These two descriptions seem to contradict each other the lint check says we should only use it if minSdkVersion < 17 while the javadoc says targetSdkVersion >= 17 and make sure you don't call it on devices < 17. Which one is correct? I've heard of certain features or behaviors only being enabled when you change your targetSdkVersion but never when you change your minSdkVersion -- You received this message because you are subscribed to the Google Groups "adt-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
