Balázs Gerlei
where else to find them
what they talk about
where they keep going back
- droidcon London2 editions2024–2025
on a stage with
never shared a talk
who talks about the same things
- Andrew Lee-Thorp3 talks
- Anique Sayed2 talks
- Mohamed Kerroumi2 talks
- Dustin Summers2 talks
- Dario Incalza2 talks
- Gal Weizman5 talks
| title | conference | date |
|---|---|---|
| Overcoming JavaScript Unsecurities in WebViews | droidcon London 2025 | 2025-10-30 |
Running JavaScript in Android WebViews is practical but risky: demos show file XHR exfiltration from app assets, JavaScript bridge token leak via timing/race… | ||
| Don’t let attackers exploit your app via Intents | AndroidMakers by droidcon 2025 | 2025-04-10 |
Demos show concrete failures and fixes: crashing apps with a null-action or malicious serializable extra using an intent fuzzer, privilege escalation via… | ||
| Overcoming Insecurities in WebViews | droidcon London 2024 | 2024-10-31 |
Walks through concrete WebView fixes and demos: demonstrates a breakout from an embedded map to Google Search, shows JavaScript running in‑process on… | ||
| Overcoming Unsecurities in WebViews | Android Worldwide July 2024 | 2024-07-30 |
WebViews default to risky behavior on many Android versions: cookies are shared per process, file and content URI access is allowed by default (up through… | ||
| nothing matches | ||