Is there a to tell if someone wrote a WebView wrapper for my webapp?

Question

I wrote a webapp and recently had someone creating an app for Android that is only a WebView wrapper. This is a security issue as whoever created this could potentially be collecting my webapp user login details. So is there a way with JavaScript or server side to tell if the application is running inside a webview?

Answer 1

尝试将X-Frame-Options设置为在您的服务器上拒绝，则WebView将不再起作用https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options