AIKIDO-2026-297931

TL;DR

Capacitor's WebView navigation guard uses only a target URL's host and scheme, so a navigation to the internal HTTP proxy path is allowed as ordinary in-app navigation. Loading that path as a document makes the native layer fetch an arbitrary, caller specified remote URL and return the response body to the WebView at the app's own origin, regardless of whether CapacitorHttp is enabled. Script in that response then runs with full same-origin trust, including access to localStorage, cookies, and every native capability the app exposes through its registered plugins. The fix blocks navigation to the proxy path before plugins can override it, refuses the proxy for document and subframe requests, restricts it to enabled CapacitorHttp configurations, and adds a sandboxing Content-Security-Policy.