I suggest you re-read the warnings. The lint says it SHOULD NOT be called if minSdk < 17. The documentation says it SHOULD ONLY be called on 4.2 and later (i.e. minSdk >= 17).
On Thu Aug 21 2014 at 1:48:32 PM Scott Olcott <[email protected]> wrote: > I am getting a lint error when I call WebView.addJavaScriptInterface even > though I wrap it in a check to make sure that it only runs on API 17 or > above. The lint description says > > WebView.addJavascriptInterface should not be called with minSdkVersion < >> 17 for security reasons: JavaScript can use reflection to manipulate >> application > > > While the documentation at > http://developer.android.com/reference/android/webkit/WebView.html#addJavascriptInterface(java.lang.Object, > java.lang.String) says > >> The most secure way to use this method is to target JELLY_BEAN_MR1 and to >> ensure the method is called only when running on Android 4.2 or later. > > > These two descriptions seem to contradict each other the lint check says > we should only use it if minSdkVersion < 17 while the javadoc says > targetSdkVersion >= 17 and make sure you don't call it on devices < 17. > Which one is correct? I've heard of certain features or behaviors only > being enabled when you change your targetSdkVersion but never when you > change your minSdkVersion > > > > > > -- > You received this message because you are subscribed to the Google Groups > "adt-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "adt-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
