Publish failed on Google play: SSL Handler

[thunshell]

• [x] I have read the Get Started - Installation section
• [x] I have read and done the Get Started - Setup Android section
• [x] I have read and done the Get Started - Setup iOS section
• [x] I have already searched for the same problem

Environment

Technology	Version
Flutter version
Plugin version
Android version
iOS version
Xcode version

Device information:

Description

Expected behavior:

Current behavior:

Steps to reproduce

1. This
2. Than that
3. Then

Images

Stacktrace/Logcat

Hello Google Play Developer, We reviewed myapp, with package name com.xxx.myapp, and found that your app uses software that contains security vulnerabilities for users. Apps with these vulnerabilities can expose user information or damage a user’s device, and may be considered to be in violation of our Malicious Behavior policy.

Below is the list of issues and the corresponding APK versions that were detected in your recent submission. Please migrate your apps to use the updated software as soon as possible and increment the version number of the upgraded APK. SSL Error Handler For more information on how to address WebView SSL Error Handler alerts, please see this Google Help Center article.

[github-actions[bot]]

👋 @thunshell

NOTE: This comment is auto-generated.

Are you sure you have already searched for the same problem?

Some people open new issues but they didn't search for something similar or for the same issue. Please, search for it using the GitHub issue search box or on the official inappwebview.dev website, or, also, using Google, StackOverflow, etc. before posting a new one. You may already find an answer to your problem!

If this is really a new issue, then thank you for raising it. I will investigate it and get back to you as soon as possible. Please, make sure you have given me as much context as possible! Also, if you didn't already, post a code example that can replicate this issue.

In the meantime, you can already search for some possible solutions online! Because this plugin uses native WebView, you can search online for the same issue adding android WebView [MY ERROR HERE] or ios WKWebView [MY ERROR HERE] keywords.

Following these steps can save you, me, and other people a lot of time, thanks!

[sean5940]

Has anyone found a solution?

[chaudharydeepanshu]

I'm also facing the same issue. And I found that there is a method called certificate pinning which compares the certificate received and the certificate already provided in the app. But I don't quite understand how to achieve that as there was no example based on flutter and inappwebview.

I also have one doubt for @pichillilorenzo (Sorry to disturb) . The flutter_browser_app works with the URLs which have "Missing intermediate certificate" issue. I tried to understand how it works but I didn't find anything related to that and just ended up updating the project. The link I used for testing was this which worked fine in your app but not mine. The flutter_browser_app doesn't even receive a onReceivedServerTrustAuthRequest. So can you tell us how you are handling this situation in your app? As it is available on playstore also so google must not have any issue with your app.

Thank you.