# Google Blocks App due to Webview SSLErrorHandler Vulnerability

**URL:** <https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875>\
**Category:** Questions about Thunkable X\
**Created:** [December 2, 2020, 2:02pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875 "2020-12-02T14:02:21Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![regisby-if](https://avatars.discourse-cdn.com/v4/letter/r/ba9def/32.png) [@regisby-if](https://community.thunkable.com/u/regisby-if)\
**Post date:** [December 2, 2020, 2:02pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/1 "2020-12-02T14:02:21Z")

</div>

Hi,  
Google has removed my app with the following message :  
We found that your app contains security vulnerabilities, which can expose user information or damage a user’s device. This is a violation of Device and Network Abuse policy. Specifically, your app(s) are vulnerable to **Webview SSLErrorHandler**.

In my app, I use a webview to display google site.

Is anyone understand the problem ?

---

<div class="post-metadata">

**Author:** ![eko.devs.apploroceo](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/eko.devs.apploroceo/32/93147_2.png) [@eko.devs.apploroceo](https://community.thunkable.com/u/eko.devs.apploroceo)\
**Post date:** [December 2, 2020, 2:03pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/2 "2020-12-02T14:03:38Z")

</div>

have u put ads?

---

<div class="post-metadata">

**Author:** ![regisby-if](https://avatars.discourse-cdn.com/v4/letter/r/ba9def/32.png) [@regisby-if](https://community.thunkable.com/u/regisby-if)\
**Post date:** [December 2, 2020, 2:15pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/3 "2020-12-02T14:15:48Z")

</div>

No, it is a simple Google Site.  
It contains :

- texte, image
- embeded youtube video
- Google Forms

---

<div class="post-metadata">

**Author:** ![eko.devs.apploroceo](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/eko.devs.apploroceo/32/93147_2.png) [@eko.devs.apploroceo](https://community.thunkable.com/u/eko.devs.apploroceo)\
**Post date:** [December 2, 2020, 2:25pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/4 "2020-12-02T14:25:52Z")

</div>

oh ok thats strange.  
have u done anything on ur own cuz that maters . a simple sites for google wont accept

---

<div class="post-metadata">

**Author:** ![regisby-if](https://avatars.discourse-cdn.com/v4/letter/r/ba9def/32.png) [@regisby-if](https://community.thunkable.com/u/regisby-if)\
**Post date:** [December 2, 2020, 2:41pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/5 "2020-12-02T14:41:36Z")

</div>

I don’t think so.  
Sites are in https.  
They are stored in a google workplace account.  
For exemple, a demo site that I use :

> **[Site Demo](https://sites.google.com/itinera-formation.com/site-demo/accueil)**

In my app, I use multiple google site with url stored in firebase.  
When a user i s connected, I find in firebase its google site URL and display it in a webview.

All sites are made with Google site.

---

<div class="post-metadata">

**Author:** ![eko.devs.apploroceo](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/eko.devs.apploroceo/32/93147_2.png) [@eko.devs.apploroceo](https://community.thunkable.com/u/eko.devs.apploroceo)\
**Post date:** [December 2, 2020, 2:44pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/6 "2020-12-02T14:44:43Z")

</div>

maybe someone reportted ur site  
r  
try and add splash and see

---

<div class="post-metadata">

**Author:** ![regisby-if](https://avatars.discourse-cdn.com/v4/letter/r/ba9def/32.png) [@regisby-if](https://community.thunkable.com/u/regisby-if)\
**Post date:** [December 2, 2020, 3:08pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/7 "2020-12-02T15:08:20Z")

</div>

what do you mean try and add splash ?

---

<div class="post-metadata">

**Author:** ![eko.devs.apploroceo](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/eko.devs.apploroceo/32/93147_2.png) [@eko.devs.apploroceo](https://community.thunkable.com/u/eko.devs.apploroceo)\
**Post date:** [December 2, 2020, 3:08pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/8 "2020-12-02T15:08:36Z")

</div>

yes yes yes

---

<div class="post-metadata">

**Author:** ![drted](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/drted/32/92694_2.png) [@drted](https://community.thunkable.com/u/drted)\
**Post date:** [December 2, 2020, 4:17pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/9 "2020-12-02T16:17:20Z")

</div>

@domhnallohanlon and @wei ,

Could this be a side effect of some of the changes your team has been working on?

---

<div class="post-metadata">

**Author:** ![luv.ak.tech](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/luv.ak.tech/32/104896_2.png) [@luv.ak.tech](https://community.thunkable.com/u/luv.ak.tech)\
**Post date:** [December 2, 2020, 4:17pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/10 "2020-12-02T16:17:45Z")

</div>

> [@regisby-if](#):
>
> what do you mean try and add splash ?

he asked what you mean  
and you are telling

> [@eko.devs.apploroceo](#):
>
> yes yes yes

what does this mean?

---

<div class="post-metadata">

**Author:** ![eko.devs.apploroceo](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/eko.devs.apploroceo/32/93147_2.png) [@eko.devs.apploroceo](https://community.thunkable.com/u/eko.devs.apploroceo)\
**Post date:** [December 2, 2020, 4:26pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/11 "2020-12-02T16:26:34Z")

</div>

> [@luv.ak.tech](#):
>
> what does this mean?

this means use splash and try

---

<div class="post-metadata">

**Author:** ![luv.ak.tech](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/luv.ak.tech/32/104896_2.png) [@luv.ak.tech](https://community.thunkable.com/u/luv.ak.tech)\
**Post date:** [December 3, 2020, 3:11am UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/12 "2020-12-03T03:11:29Z")

</div>

> [@Ekansh\_Pandit](#):
>
> this means use splash and try

but what does this mean explain more

---

<div class="post-metadata">

**Author:** ![eko.devs.apploroceo](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/eko.devs.apploroceo/32/93147_2.png) [@eko.devs.apploroceo](https://community.thunkable.com/u/eko.devs.apploroceo)\
**Post date:** [December 3, 2020, 3:28am UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/13 "2020-12-03T03:28:25Z")

</div>

when app opens an logo comes and disappear and navigates to the next screen

---

<div class="post-metadata">

**Author:** ![ioannis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/ioannis/32/146956_2.png) [@ioannis](https://community.thunkable.com/u/ioannis)\
**Post date:** [November 8, 2024, 12:20pm UTC](https://community.thunkable.com/t/google-blocks-app-due-to-webview-sslerrorhandler-vulnerability/1014875/15 "2024-11-08T12:20:01Z")

</div>


