Jinwoo-H 195274eb1f fix(mobile-web): deny page network APIs at document start on Android ...

blockNetworkLoads and shouldInterceptRequest never see a WebSocket, and CSP
connect-src is the only fence a compromised page had to defeat there. iOS has
installed a document-start blocker since the shell landed; Android now installs
the byte-identical script through WebViewCompat.addDocumentStartJavaScript
scoped to the session origin, including on the in-place onRenderProcessGone
reload, and fails closed when DOCUMENT_START_SCRIPT is unsupported.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb

2026-09-01 16:55:53 -04:00

..

expo-mobile-web-shell

fix(mobile-web): deny page network APIs at document start on Android

2026-09-01 16:55:53 -04:00

expo-two-way-audio

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00