MR22 release has been signed!

[xzz123]

I would like to know if NEWLY ADDED blob phishing detection mechanism depend on:

1. inject script into web traffic to...
2. scan HTTPS traffic

[Dmitriy.Pisarets]

@xzz123 @harlan4096
I have asked my colleagues. I will answer, when get info.

P.S. about superMITM info will be only next week.

[Dmitriy.Pisarets]

@harlan4096 said in MR22 release has been signed!:

But clicking on that link, Opera opens and goes to Google Chrome store, and then I got a:

Please reproduce it with out problem record tool to collect video, traces and GSI at one. And make a report in MR22 branch.

thank you!

[xzz123]

hello
What is WebView used for in 21.22？
thanks.
I have not found any pages loaded by webview

[tistou]

@xzz123 Also interested in knowing its usefulness
Especially to have it in "duplicate"

[harlan4096]

@Dmitriy.Pisarets Reported!

[xzz123]

@tistou said in MR22 release has been signed!:

@xzz123 Also interested in knowing its usefulness
Especially to have it in "duplicate"

^_^
My guess
It is used in product tier transformation process and the out of box process
but I need to try and check.
May be I can wait for KL’s official answer.

[tistou]

@xzz123 Ok ;)

I would test, by renaming (or deleting) the directory, how K behaves

[AlexeyK]

WebView is a built-in app browser. It will be used, for example, to display KL news or to run the built-in app store, as I understand.

[tistou]

It was already present in previous versions (KL news, etc...)
if I remember correctly (I don't use them)

[AlexeyK]

@tistou said in MR22 release has been signed!:

It was already present in previous versions (KL news, etc...)

Yes, I know. But there is an improvement in the form of a built-in webview for minimizing issues. If you don't see bugs, it doesn't mean that they don't exist, so such improvements fix them and improve other things like performance, stability, security, usability of the app. )

[tistou]

@AlexeyK

Well, that doesn't explain the "duplicate"
Let's wait for an official response, as @xzz123 points out

[AlexeyK]

@tistou said in MR22 release has been signed!:

that doesn't explain the "duplicate"

I don't understand what you're talking about.

@tistou said in MR22 release has been signed!:

Let's wait for an official response

Wish you lots of success!

[tistou]

@AlexeyK

Webview2 is already present under Windows, even twice (MS also likes duplicates)
So K installs it a third time with this 21.22

[AlexeyK]

@tistou said in MR22 release has been signed!:

So K installs it a third time with this 21.22

https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/distribution?tabs=dotnetcsharp

"The Fixed Version runtime distribution mode
In the Fixed Version distribution mode, you download a specific version of the WebView2 Runtime and package it together with your WebView2 app in your app package. The WebView2 Runtime that you package with your app is used only by your WebView2 app, not by any other apps on the client's machine.
You have more control over versioning of the WebView2 Runtime. You know which WebView2 APIs are available to your app, because you control which version of the WebView2 Runtime is available to your app. Your app doesn't need to test whether the latest APIs are present."

[tistou]

If this "app" is necessary for security soft, why not
As long as K doesn't become a "gas factory" soft

[tistou]

@xzz123 said in MR22 release has been signed!:

^_^
My guess
It is used in product tier transformation process and the out of box process
but I need to try and check.
May be I can wait for KL’s official answer.

As mentioned, I tested by removing this directory, and K works fine (News, etc...)
I didn't see what it was for

[xzz123]

I would like to suggest again that K support HTTP3 and QUIC.
thanks.

[Dmitriy.Pisarets]

@xzz123 @tistou
Hello!
about webview I got this answer:
"WebView2 is used for showing IPM content (news, custom content).
The product use own WebView's cabs to be independent from changing MS packages in system and for security reasons. (we have good experience with using own .Net packages). It's protect us from some problems."

[Dmitriy.Pisarets]

@xzz123 said in MR22 release has been signed!:

I would like to know if NEWLY ADDED blob phishing detection mechanism depend on:

1. inject script into web traffic to...
2. scan HTTPS traffic

I am, sorry (and for reply time too), but this question cannot be answered at this forum. Please wait for official news, or contact support.