Minimize XRW in the WebViewActivity

[APraxx]

Minimize the X-Requested-With (XRW) header for privacy

Until Google offers other means, like their Blog suggests, this seems like a sensible solution.

Reference: https://android-developers.googleblog.com/2023/02/improving-user-privacy-by-requiring-opt-in-to-send-x-requested-wih-header-from-webview.html

[cylonid]

Hi,
thanks for bringing this to my attention. The header in question is not set from WebView v114 onwards, so this should not be necessary any more.

[APraxx]

Hi,

Thanks i read that too but couldn't see it in practice.
Maybe i need to recompile because i still see it.
Was leaky hack anyway because it won't work on images and resources.

Other thing i noticed is original user agent is available through SEC-CH-UA, but i don't know if that's not a browser thing.

[APraxx]

#141 refers to the mentioned SEC-CH-UA

[APraxx]

Tested on my current setup X-Requested-With still there

Reproduce:
open: duckduckgo.com
search for: user agent
in the last line it shows on my phone