I have an Android
app where it seems that, despite having a network_security_config
setup, there seems to be requests going to content-autofill.googleapis.com
in production. This seems to be happening in the text-fields within web pages in some parts of the app where we open them in a WebView
. This is a problem since we have security requirements that forbid requests to any external service apart from our own.
Is there a way to blacklist content-autofill.googleapis.com
somehow or disable the auto-fill functionality at the WebView
or application level? Can this even be controlled?