pedant/safe-java-js-webview-bridge

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2415 stars · 561 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An Android library providing a safe alternative to WebView's addJavascriptInterface for Java-JavaScript communication, using WebChromeClient prompt-based injection to avoid the remote code execution vulnerability on Android < 4.2. It supports async callbacks, method overloading, and all common JS parameter types.

Use cases

• call native Java methods from JavaScript in an Android WebView
• secure JS-to-Java bridge for hybrid Android apps
• avoid addJavascriptInterface security vulnerability on old Android versions
• support async callbacks between web page JS and native code
• build hybrid apps with safe WebView native interop

When to choose

• building a hybrid Android app that must support Android versions below 4.2 safely
• you need a lightweight drop-in WebView JS bridge with async callback support

When to avoid

• targeting only Android 4.2+ where @JavascriptInterface is sufficient
• you need an actively maintained library with recent updates and support
• building cross-platform apps where a modern framework bridge is available

Facets

library · maturity abandoned

security sdk developer-tools mobile-development web-development security android-tools jvm webview hybrid-app javascript-bridge android js-java-interop mobile

Member repositories

For agents

markdown · JSON · MCP: product_card(name="pedant/safe-java-js-webview-bridge")