Project

General

Profile

Feature #37

Customize `X-Requested-With` Header

Added by Soren Stoutner over 2 years ago. Updated about 1 year ago.

Status:
In Progress
Priority:
4.x
Start date:
06/28/2016
Due date:
% Done:

0%

Estimated time:

Description

By default, WebView sends an X-Requested-With header with the application ID (com.stoutner.privacybrowser.standard) with every page load. It looks like it is possible to change the header, but not to leave it out (Lightning sends the header with a null value).

http://stackoverflow.com/questions/17832313/android-disable-x-requested-with-header-in-webview

http://stackoverflow.com/questions/7610790/add-custom-headers-to-webview-resource-requests-android#comment10183596_8209272

At a minimum, it would be nice to allow the user to set a custom header. Ultimately, we might need to embed a custom WebView to get full control of the functionality.

History

#1 Updated by Soren Stoutner over 2 years ago

  • Description updated (diff)

#2 Updated by Soren Stoutner over 2 years ago

  • Description updated (diff)

#3 Updated by Soren Stoutner over 2 years ago

  • Status changed from New to In Progress

This is partially fixed. The initial request to each website loads `X-Requested-With` paired with a null value.

However, requests for resources like images and css load `X-Requested-With:com.stoutner.privacybrowser.standard`.

This is because Google wants to personally make my life difficult.

http://stackoverflow.com/questions/38412965/adding-custom-header-to-webview-by-adding-headers-to-webresourcerequests-header

#4 Updated by Soren Stoutner over 2 years ago

  • Subject changed from Customize X-Requested-With Header to Customize `X-Requested-With` Header

#6 Updated by Soren Stoutner over 2 years ago

Beginning with commit https://git.stoutner.com/?p=PrivacyBrowser.git;a=commitdiff;h=87cd85777034a3b7627b68b3d60004fb20198727 Privacy Browser will send a null value for `X-Requested-With` on initial web requests. This will be included in Privacy Browser 1.9.

https://www.stoutner.com/the-x-requested-with-header/

#7 Updated by Soren Stoutner over 1 year ago

  • Priority changed from 2.x to 3.x
  • Parent task set to #86

This cannot be fully fixed until Privacy WebView replaces Android's WebView.

#8 Updated by Soren Stoutner about 1 year ago

  • Priority changed from 3.x to 4.x

#9 Updated by Soren Stoutner about 1 year ago

  • Parent task deleted (#86)

Also available in: Atom PDF