From 9155fb8e71cb69000d8a75194b5b69d1fd2bc767 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sun, 23 Jun 2019 23:00:55 -0400 Subject: [PATCH] mention WebView browser sensors access workaround --- static/usage.html | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/static/usage.html b/static/usage.html index d24f3c09..30be2500 100644 --- a/static/usage.html +++ b/static/usage.html @@ -223,8 +223,10 @@ by the WebView widget. For example, they can't provide a setting for toggling sensors access because the feature is fairly new and the WebView WebSettings API doesn't yet include support for it as it does for JavaScript, location, cookies, DOM storage and - other older features. The WebView sandbox also currently runs every instance within - the same process and doesn't support site isolation.

+ other older features. For sensors, the Sensors app permission added by GrapheneOS can + be toggled off for the browser app as a whole instead. The WebView sandbox also + currently runs every instance within the same process and doesn't support site + isolation.

Avoid Gecko-based browsers like Firefox as they're currently much more vulnerable to exploitation and inherently add a huge amount of attack surface. Gecko doesn't have