I'm trying to make my WebView headers look like the user is just using the regular browser and not using a WebView. From what I can gather the headers are identical apart that the WebView also sends an X-Requested-With header containing the apps package name. Is there any way of preventing this?
Asked
Active
Viewed 1.3k times
19
-
1+1 usually x-requested-with is used to detect ajax request, kind of hoses things when android sends the header on _every_ request, ajax or not. – virtualeyes Aug 03 '13 at 13:23
-
1This sounds a lot like http://stackoverflow.com/questions/7610790/add-custom-headers-to-webview-resource-requests-android – jlindenbaum Mar 25 '15 at 16:52
-
@KingFu - Were you able to discard X-Request-With header completely ? Cause all answers are mostly around how to Modify or Edit the header instead of how to deleting or disabling it. – Manisha Feb 08 '17 at 23:16
1 Answers
4
You can do it for Android API > 11
public class AndroidMobileAppSampleActivity extends Activity {
Map<String, String> extraHeaders = new HashMap<String, String>();
@Override
public void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.main);
WebView mainWebView = (WebView) findViewById(R.id.mainWebView);
// must define X-Requested-With, if header missing, then webview will
//add your package name
extraHeaders.put("X-Requested-With", "your presentation");
WebSettings webSettings = mainWebView.getSettings();
webSettings.setJavaScriptEnabled(true);
mainWebView.setWebViewClient(new MyCustomWebViewClient());
mainWebView.setScrollBarStyle(View.SCROLLBARS_INSIDE_OVERLAY);
mainWebView.loadUrl("http://www.somesite.com", extraHeaders);
}
private class MyCustomWebViewClient extends WebViewClient {
@Override
public WebResourceResponse shouldInterceptRequest(WebView view,
String url) {
// TODO Here you must overwrite request using your
// HttpClient Request
// and pass it to new WebResourceResponse
return new WebResourceResponse(response.ContentType, response.ContentEncoding, responseStream);
}
@Override
public boolean shouldOverrideUrlLoading(WebView view, String url) {
// Apply again your heades here
view.loadUrl(url, extraHeaders);
return true;
}
}
}
anopid
- 109
- 5
-
4This means we can only modify value of "X-Requested-With" header. Is there way we can completely delete or discard it ? – Manisha Feb 10 '17 at 01:41
-
3This only modify the value in this url's request, all js and image requests started from the response html still have whatever the original value is in X-Requested-With – yorkw May 30 '18 at 10:12
-