[guardian-dev] Webview proxying broken (again) on L/5.0

[Rod Hynes]

On Mon, Nov 10, 2014 at 12:00 PM, <guardian-dev-request at lists.mayfirst.org>
wrote:

> Date: Mon, 10 Nov 2014 11:25:15 -0500
> From: Nathan of Guardian <nathan at guardianproject.info>
> To: guardian-dev at lists.mayfirst.org
> Subject: [guardian-dev] Webview proxying broken (again) on L/5.0
> Message-ID:
>         <1415636715.1612201.189242169.3240BC93 at webmail.messagingengine.com
> >
> Content-Type: text/plain
>
>
> Just tested Orweb/Netcipher code on Android L preview roms and the
> proxying code from KitKat is no longer working on Android L.
>
> I am hopeful, as usual, someone can find the right reflection/hidden API
> call to make this work, but somedays I just wish motherfrackin' Google
> would make a simple API that worked.
>

Hi,

Psiphon has shipped an update with this fix for proxying WebView on
Lollipop:

https://bitbucket.org/psiphon/psiphon-circumvention-system/src/2b54f44afe2ba089dee1d72887ec3d694ce4462e/Android/PsiphonAndroidLibrary/src/com/psiphon3/psiphonlibrary/WebViewProxySettings.java?at=default#cl-216

BTW, we disabled our root/iptables mode on Lollipop due to the uncertain
SELinux requirements (http://su.chainfire.eu/#selinux). Last time I looked,
it wasn't clear what sort of SELinux config rooted devices will end up with
(https://plus.google.com/+Chainfire/posts/VxjfYJnZAXP). Do you have any
further insights about this?

Our VpnService mode works fine, with some minor tweaks for Lollipop.

Rod
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20141110/a3854915/attachment.html>