[Android4.1-4.3][v0.39]WebView source={{html}} show all html string without parse html if 'baseUrl' is set

[peichao01]

Description

use source={{baseUrl: 'xx', html:<h1>Hi</h1><script>alert(1);</script>}}
Android4.3 looks like treat webview as , will output all html string in View,
use html=xxx or source={{html:xxx}} works

Reproduction

very simple code will reproduce:

export default class RootComponent extends Component {
  render() {
    // return this.render2();
    return this.render1();
  }
  // warn, but works!! except can not alert
  render2 () {
    return (
      <WebView
        // html="<h1>H1</h1><script>alert(1);</script>" // or the following works
        source={{html: "<h1>H1</h1><script>alert(1);</script>"}}
      />
    )
  }
  // will show all html string in View like <Text> label
  render1 () {
    return (
      <WebView
        source={{
          baseUrl: 'http://test.com',
          html="<h1>H1</h1><script>alert(1);</script>"
        }}
      />
    )
  }
}

Solution

Additional Information

• React Native version: [v0.39]
• Platform: [Android4.1-4.3, not test Android4.4]
• Operating System: [MacOS]

[peichao01]

And, Android4.3 webview window.alert('something') doest not alert anything

[Exilz]

I can confirm this happens on RN 0.39 on my Galaxy S3 with Android 4.3.

[ivanzotov]

same issue

[Exilz]

Same thing happened in the NativeScript project, looks like the solution is quite simple
NativeScript/NativeScript#1038

[hramos]

Closing this issue because it has been inactive for a while. If you think it should still be opened let us know why.

[stereodenis]

@hramos could you reopen it, cause it is still not fixed?