Skip to main content

Our app uses intercom Andorid sdk and intercom Android sdk uses setDomStorageEnabled(true) that is reported as a security concern for our app.

The DOM storage control is set to true, which allows the application to store page elements that could include user sensitive information. Setting the DOM Storage value to false will prevents local storage from being used. 

The setDomStorageEnabled flag found to be TRUE in the following class io.intercom.android.sdk.sheets.SheetWebViewPresenter 

We are using the version 12.3.0 of Android sdk in our app, could you please let us know if this behavior has changed in any of the recent versions of the sdk or if setDOMStorage is still enabled  in intercom sdk what kind of data is stored in local storage? 

 

 

Hi @Intercom Admin !

I believe that has to be set to True in order for WebView to work. That said, I’ll bring your security concerns up to our Product Team so they can determine the best steps to take. 


Reply