Name: Video recording for Fortifying WKWebView: Security Checklist for iOS Engineers - Codementor Events
Uploaded: 2023-05-25
Description: Join Valeriy Popov as he discusses a practical checklist for iOS engineers to securely integrate web views into their applications. Learn how WebKit can support these integrations and ensure the security of your app. Don't miss this insightful talk!

### About the talk
The native iOS ecosystem is well-regarded for its strong security, featuring app sandboxing, a statically typed language for the development, and libraries built with security in mind. However, developers occasionally need to venture beyond the native environment to incorporate web parts. WebKit offers valuable support for securing these integrations. In this talk, I provide a practical checklist tailored for iOS engineers, who may not be security experts, to guide them in securely integrating web views into their applications.

### This talk will cover:
- Configuring WKWebView: establishing secure transport, managing cookies effectively, and serving html/css assets securely
- A brief look at common attacks and strategies to defend against them 
- Methods for crafting a secure JavaScript bridge between Web and Native
- A discussion of native APIs safe for web calls and those to avoid for minimizing security risks and maintaining app integrity

technical events about mobile like React Native

Mobile Development

Tech Lead at FAANG

Valerii Popov

GitHub

LinkedIn

Twitter

Join Valeriy Popov as he discusses a practical checklist for iOS engineers to securely integrate web views into their applications. Learn how WebKit can support these integrations and ensure the security of your app. Don't miss this insightful talk!

Video recording for: Fortifying WKWebView: Security Checklist for iOS Engineers

Discussion