When creating a new character, we are obviously just using the Web based generator in a webview inside the app. However, I can go to the fantasy name generator website via the link and then from there navigate to any link on their site, including adds to other external sites.
This places content in your app that you have no control over and provides an avenue for malicious actors. Perhaps lock down the Web views in the app to only allow access to domains you control?
When creating a new character, we are obviously just using the Web based generator in a webview inside the app. However, I can go to the fantasy name generator website via the link and then from there navigate to any link on their site, including adds to other external sites.
This places content in your app that you have no control over and provides an avenue for malicious actors. Perhaps lock down the Web views in the app to only allow access to domains you control?
-
View User Profile
-
View Posts
-
Send Message
D&D Beyond StaffHmm, we'd need to consider this. Thank you!