@capgo/capacitor-inappbrowser 8.13.3 → 8.13.5

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/OrientationLayoutSupport.java

@@ -0,0 +1,41 @@
+package ee.forgr.capacitor_inappbrowser;
+
+/**
+ * Helpers for deciding when a managed WebView dialog must relayout after a configuration
+ * change. Capacitor activities declare {@code android:configChanges}, so the host activity
+ * (and this dialog) are not recreated on rotation — layouts and window insets must be
+ * refreshed explicitly or the WebView can stop scrolling after portrait→landscape.
+ */
+final class OrientationLayoutSupport {
+
+    private OrientationLayoutSupport() {}
+
+    static boolean shouldRefreshBrowserLayout(
+        Integer previousOrientation,
+        Integer previousScreenWidthDp,
+        Integer previousScreenHeightDp,
+        Integer previousSmallestScreenWidthDp,
+        Integer previousDensityDpi,
+        int currentOrientation,
+        int currentScreenWidthDp,
+        int currentScreenHeightDp,
+        int currentSmallestScreenWidthDp,
+        int currentDensityDpi
+    ) {
+        if (previousOrientation == null) {
+            return true;
+        }
+
+        return (
+            previousOrientation != currentOrientation ||
+            previousScreenWidthDp == null ||
+            previousScreenWidthDp != currentScreenWidthDp ||
+            previousScreenHeightDp == null ||
+            previousScreenHeightDp != currentScreenHeightDp ||
+            previousSmallestScreenWidthDp == null ||
+            previousSmallestScreenWidthDp != currentSmallestScreenWidthDp ||
+            previousDensityDpi == null ||
+            previousDensityDpi != currentDensityDpi
+        );
+    }
+}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/SafeAreaInsetsSupport.java

@@ -97,18 +97,19 @@ final class SafeAreaInsetsSupport {
 
     /**
      * Bottom padding to apply to the WebView container (a SwipeRefreshLayout, which honours its own
-     * padding but ignores child margins). Combines the resolved safe bottom inset with a compensation
-     * term: on Android 15+ the AppBarLayout is pushed down by the status-bar height, which shifts the
-     * container's bottom edge off-screen by that same amount, so it must be added back as padding
-     * regardless of the safe-margin option.
+     * padding but ignores child margins). Takes the larger of the safe bottom inset and the keyboard
+     * (IME) inset via {@link #resolveBottomMargin}, then adds a compensation term: on Android 15+ the
+     * AppBarLayout is pushed down by the status-bar height, which shifts the container's bottom edge
+     * off-screen by that same amount, so it must be added back as padding regardless of the options.
      */
     static int resolveContainerBottomPadding(
         boolean enabledSafeBottomMargin,
         int safeBottomInset,
+        int imeBottom,
         boolean appBarHandlesTopInset,
         int statusBarTop
     ) {
-        int base = enabledSafeBottomMargin ? Math.max(0, safeBottomInset) : 0;
+        int base = resolveBottomMargin(enabledSafeBottomMargin, safeBottomInset, imeBottom);
         int appBarCompensation = appBarHandlesTopInset ? Math.max(0, statusBarTop) : 0;
         return base + appBarCompensation;
     }
@@ -130,4 +131,14 @@ final class SafeAreaInsetsSupport {
 
         return Math.max(0, statusBarTop);
     }
+
+    /**
+     * Whether the WebView container must be inset for the bottom system bar. On Android 15+ the dialog
+     * is forced edge-to-edge (decorFitsSystemWindows=false), so the window always draws under the
+     * navigation bar and insetting is mandatory to keep bottom content on-screen, regardless of the
+     * enabledSafeBottomMargin opt-in that older versions honour.
+     */
+    static boolean shouldInsetBottomForContainer(boolean enabledSafeBottomMargin, boolean isEdgeToEdge) {
+        return enabledSafeBottomMargin || isEdgeToEdge;
+    }
 }

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/WebViewDialog.java

@@ -5,10 +5,12 @@ import android.app.Activity;
 import android.app.AlertDialog;
 import android.app.Dialog;
 import android.content.ActivityNotFoundException;
+import android.content.ComponentCallbacks2;
 import android.content.Context;
 import android.content.DialogInterface;
 import android.content.Intent;
 import android.content.res.AssetManager;
+import android.content.res.Configuration;
 import android.content.res.Resources;
 import android.graphics.Bitmap;
 import android.graphics.Canvas;
@@ -356,6 +358,20 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
     private boolean cachedTitleIconResolved;
     private boolean isHiddenModeActive = false;
     private boolean toolbarHideInProgress = false;
+    private boolean configurationCallbacksRegistered = false;
+    private Configuration lastConfiguration;
+    private final ComponentCallbacks2 configurationCallbacks = new ComponentCallbacks2() {
+        @Override
+        public void onConfigurationChanged(Configuration newConfig) {
+            handleConfigurationChanged(newConfig);
+        }
+
+        @Override
+        public void onLowMemory() {}
+
+        @Override
+        public void onTrimMemory(int level) {}
+    };
     private WindowManager.LayoutParams previousWindowAttributes;
     private Drawable previousWindowBackground;
     private ViewGroup.LayoutParams previousWebViewLayoutParams;
@@ -2824,6 +2840,9 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             showAccordingToLayerModeOrFallback();
             resolveOpenWebViewIfNeeded();
         }
+
+        // Capacitor activities handle orientation themselves; refresh dialog layout explicitly.
+        registerConfigurationCallbacks();
     }
 
     private void applyHiddenMode() {
@@ -2974,22 +2993,11 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         // Check if we need Android 15+ specific fixes
         boolean isAndroid15Plus = Build.VERSION.SDK_INT >= 35;
 
-        // Find status bar color view and toolbar for Android 15+ specific handling
-        View statusBarColorView = findViewById(R.id.status_bar_color_view);
         View toolbarView = findViewById(R.id.tool_bar);
 
         // Fix content browser layout height for all Android versions to allow proper scrolling
         // This fixes landscape scrolling issues where bottom content is unreachable
-        View contentBrowserLayout = findViewById(R.id.content_browser_layout);
-        if (contentBrowserLayout != null) {
-            ViewGroup.LayoutParams layoutParams = contentBrowserLayout.getLayoutParams();
-            if (layoutParams != null) {
-                // Use MATCH_PARENT for height to allow proper scrolling in all orientations
-                // The AppBarLayout's layout_behavior will handle positioning automatically
-                layoutParams.height = ViewGroup.LayoutParams.MATCH_PARENT;
-                contentBrowserLayout.setLayoutParams(layoutParams);
-            }
-        }
+        ensureContentBrowserMatchParentHeight();
 
         boolean isBlankToolbar = _options != null && TextUtils.equals(_options.getToolbarType(), "blank");
         if (isBlankToolbar) {
@@ -2998,53 +3006,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
 
         // Special handling for Android 15+
         if (isAndroid15Plus && !isBlankToolbar) {
-            // Get AppBarLayout which contains the toolbar
-            if (toolbarView != null && toolbarView.getParent() instanceof com.google.android.material.appbar.AppBarLayout appBarLayout) {
-                // Remove elevation to eliminate shadows (only on Android 15+)
-                appBarLayout.setElevation(0);
-                appBarLayout.setStateListAnimator(null);
-                appBarLayout.setOutlineProvider(null);
-
-                // Determine background color to use
-                int backgroundColor = Color.BLACK; // Default fallback
-                if (_options.getToolbarColor() != null && !_options.getToolbarColor().isEmpty()) {
-                    try {
-                        backgroundColor = Color.parseColor(_options.getToolbarColor());
-                    } catch (IllegalArgumentException e) {
-                        Log.e("InAppBrowser", "Invalid toolbar color, using black: " + e.getMessage());
-                    }
-                } else {
-                    // Follow system theme if no color specified
-                    boolean isDarkTheme = isDarkThemeEnabled();
-                    backgroundColor = isDarkTheme ? Color.BLACK : Color.WHITE;
-                }
-
-                // Apply fixes for Android 15+ using a delayed post
-                final int finalBgColor = backgroundColor;
-                _webView.post(() -> {
-                    // Get status bar height
-                    int statusBarHeight = 0;
-                    int resourceId = getContext().getResources().getIdentifier("status_bar_height", "dimen", "android");
-                    if (resourceId > 0) {
-                        statusBarHeight = getContext().getResources().getDimensionPixelSize(resourceId);
-                    }
-
-                    // Fix status bar view
-                    if (statusBarColorView != null) {
-                        ViewGroup.LayoutParams params = statusBarColorView.getLayoutParams();
-                        params.height = statusBarHeight;
-                        statusBarColorView.setLayoutParams(params);
-                        statusBarColorView.setBackgroundColor(finalBgColor);
-                        statusBarColorView.setVisibility(View.VISIBLE);
-                    }
-
-                    // Fix AppBarLayout position
-                    ViewGroup.MarginLayoutParams params = (ViewGroup.MarginLayoutParams) appBarLayout.getLayoutParams();
-                    params.topMargin = statusBarHeight;
-                    appBarLayout.setLayoutParams(params);
-                    appBarLayout.setBackgroundColor(finalBgColor);
-                });
-            }
+            refreshEdgeToEdgeChrome();
         }
 
         // Resolve insets from the dialog window root; layout children can receive already-fitted zero insets.
@@ -3152,6 +3114,232 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         mainHandler.postDelayed(this::applyContainerInsetsSnapshot, 1200);
     }
 
+    private void registerConfigurationCallbacks() {
+        if (configurationCallbacksRegistered) {
+            return;
+        }
+
+        Context callbackContext = activity != null ? activity : _context;
+        if (callbackContext == null) {
+            return;
+        }
+
+        lastConfiguration = new Configuration(callbackContext.getResources().getConfiguration());
+        callbackContext.registerComponentCallbacks(configurationCallbacks);
+        configurationCallbacksRegistered = true;
+    }
+
+    private void unregisterConfigurationCallbacks() {
+        if (!configurationCallbacksRegistered) {
+            return;
+        }
+
+        Context callbackContext = activity != null ? activity : _context;
+        if (callbackContext != null) {
+            try {
+                callbackContext.unregisterComponentCallbacks(configurationCallbacks);
+            } catch (Exception e) {
+                Log.w("InAppBrowser", "Failed to unregister configuration callbacks: " + e.getMessage());
+            }
+        }
+
+        configurationCallbacksRegistered = false;
+        lastConfiguration = null;
+    }
+
+    private void handleConfigurationChanged(Configuration newConfig) {
+        if (isDismissing || _webView == null) {
+            return;
+        }
+
+        Integer previousOrientation = lastConfiguration != null ? lastConfiguration.orientation : null;
+        Integer previousScreenWidthDp = lastConfiguration != null ? lastConfiguration.screenWidthDp : null;
+        Integer previousScreenHeightDp = lastConfiguration != null ? lastConfiguration.screenHeightDp : null;
+        Integer previousSmallestScreenWidthDp = lastConfiguration != null ? lastConfiguration.smallestScreenWidthDp : null;
+        Integer previousDensityDpi = lastConfiguration != null ? lastConfiguration.densityDpi : null;
+
+        int currentOrientation = newConfig != null ? newConfig.orientation : (previousOrientation != null ? previousOrientation : 0);
+        int currentScreenWidthDp =
+            newConfig != null ? newConfig.screenWidthDp : (previousScreenWidthDp != null ? previousScreenWidthDp : 0);
+        int currentScreenHeightDp =
+            newConfig != null ? newConfig.screenHeightDp : (previousScreenHeightDp != null ? previousScreenHeightDp : 0);
+        int currentSmallestScreenWidthDp =
+            newConfig != null
+                ? newConfig.smallestScreenWidthDp
+                : (previousSmallestScreenWidthDp != null ? previousSmallestScreenWidthDp : 0);
+        int currentDensityDpi = newConfig != null ? newConfig.densityDpi : (previousDensityDpi != null ? previousDensityDpi : 0);
+
+        boolean shouldRefresh = OrientationLayoutSupport.shouldRefreshBrowserLayout(
+            previousOrientation,
+            previousScreenWidthDp,
+            previousScreenHeightDp,
+            previousSmallestScreenWidthDp,
+            previousDensityDpi,
+            currentOrientation,
+            currentScreenWidthDp,
+            currentScreenHeightDp,
+            currentSmallestScreenWidthDp,
+            currentDensityDpi
+        );
+
+        if (newConfig != null) {
+            lastConfiguration = new Configuration(newConfig);
+        }
+
+        if (!shouldRefresh) {
+            return;
+        }
+
+        if (Looper.myLooper() == Looper.getMainLooper()) {
+            refreshLayoutForConfigurationChange();
+        } else {
+            mainHandler.post(this::refreshLayoutForConfigurationChange);
+        }
+    }
+
+    /**
+     * Capacitor keeps the host activity alive across orientation changes. Re-apply fullscreen
+     * window dimensions, system chrome, and safe-area insets so the WebView stays scrollable
+     * after portrait↔landscape transitions.
+     */
+    private void refreshLayoutForConfigurationChange() {
+        if (isDismissing || _webView == null) {
+            return;
+        }
+
+        if (isHiddenModeActive) {
+            requestSafeAreaInsets();
+            return;
+        }
+
+        if (backLayerActive) {
+            applyBackLayerDimensions();
+        } else {
+            applyDimensions();
+        }
+
+        ensureContentBrowserMatchParentHeight();
+
+        boolean isBlankToolbar = _options != null && TextUtils.equals(_options.getToolbarType(), "blank");
+        if (isBlankToolbar) {
+            configureBlankToolbarLayout();
+        } else if (Build.VERSION.SDK_INT >= 35) {
+            refreshEdgeToEdgeChrome();
+        } else {
+            refreshStatusBarColorViewHeight();
+        }
+
+        View coordinator = findViewById(R.id.coordinator_layout);
+        if (coordinator != null) {
+            coordinator.requestLayout();
+        }
+
+        if (swipeRefreshLayout != null) {
+            swipeRefreshLayout.requestLayout();
+        }
+
+        _webView.requestLayout();
+        _webView.invalidate();
+        requestSafeAreaInsets();
+
+        mainHandler.post(this::applyContainerInsetsSnapshot);
+        mainHandler.postDelayed(this::applyContainerInsetsSnapshot, 100);
+        mainHandler.postDelayed(this::applyContainerInsetsSnapshot, 300);
+
+        _webView.post(() -> {
+            if (_webView == null) {
+                return;
+            }
+            _webView.evaluateJavascript("(function(){window.dispatchEvent(new Event('resize'));})();", null);
+        });
+    }
+
+    private void ensureContentBrowserMatchParentHeight() {
+        View contentBrowserLayout = findViewById(R.id.content_browser_layout);
+        if (contentBrowserLayout == null) {
+            return;
+        }
+
+        ViewGroup.LayoutParams layoutParams = contentBrowserLayout.getLayoutParams();
+        if (layoutParams == null) {
+            return;
+        }
+
+        layoutParams.height = ViewGroup.LayoutParams.MATCH_PARENT;
+        contentBrowserLayout.setLayoutParams(layoutParams);
+    }
+
+    private void refreshStatusBarColorViewHeight() {
+        View statusBarColorView = findViewById(R.id.status_bar_color_view);
+        if (statusBarColorView == null) {
+            return;
+        }
+
+        int statusBarHeight = getSystemStatusBarHeight();
+        ViewGroup.LayoutParams params = statusBarColorView.getLayoutParams();
+        if (params == null) {
+            return;
+        }
+
+        params.height = statusBarHeight;
+        statusBarColorView.setLayoutParams(params);
+        statusBarColorView.requestLayout();
+    }
+
+    private void refreshEdgeToEdgeChrome() {
+        if (_webView == null || _options == null) {
+            return;
+        }
+
+        View statusBarColorView = findViewById(R.id.status_bar_color_view);
+        View toolbarView = findViewById(R.id.tool_bar);
+        if (toolbarView == null || !(toolbarView.getParent() instanceof com.google.android.material.appbar.AppBarLayout appBarLayout)) {
+            refreshStatusBarColorViewHeight();
+            return;
+        }
+
+        appBarLayout.setElevation(0);
+        appBarLayout.setStateListAnimator(null);
+        appBarLayout.setOutlineProvider(null);
+
+        int backgroundColor = Color.BLACK;
+        if (_options.getToolbarColor() != null && !_options.getToolbarColor().isEmpty()) {
+            try {
+                backgroundColor = Color.parseColor(_options.getToolbarColor());
+            } catch (IllegalArgumentException e) {
+                Log.e("InAppBrowser", "Invalid toolbar color, using black: " + e.getMessage());
+            }
+        } else {
+            backgroundColor = isDarkThemeEnabled() ? Color.BLACK : Color.WHITE;
+        }
+
+        final int finalBgColor = backgroundColor;
+        _webView.post(() -> {
+            if (_webView == null) {
+                return;
+            }
+
+            int statusBarHeight = getSystemStatusBarHeight();
+
+            if (statusBarColorView != null) {
+                ViewGroup.LayoutParams params = statusBarColorView.getLayoutParams();
+                if (params != null) {
+                    params.height = statusBarHeight;
+                    statusBarColorView.setLayoutParams(params);
+                }
+                statusBarColorView.setBackgroundColor(finalBgColor);
+                statusBarColorView.setVisibility(View.VISIBLE);
+            }
+
+            ViewGroup.LayoutParams appBarParams = appBarLayout.getLayoutParams();
+            if (appBarParams instanceof ViewGroup.MarginLayoutParams marginParams) {
+                marginParams.topMargin = statusBarHeight;
+                appBarLayout.setLayoutParams(marginParams);
+            }
+            appBarLayout.setBackgroundColor(finalBgColor);
+        });
+    }
+
     private void applySafeAreaMargins(
         Insets bars,
         Insets navigationBars,
@@ -3227,6 +3415,8 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         Insets systemGestures = windowInsets != null ? windowInsets.getInsets(WindowInsetsCompat.Type.systemGestures()) : Insets.NONE;
         Insets mandatoryGestures =
             windowInsets != null ? windowInsets.getInsets(WindowInsetsCompat.Type.mandatorySystemGestures()) : Insets.NONE;
+        Insets ime = windowInsets != null ? windowInsets.getInsets(WindowInsetsCompat.Type.ime()) : Insets.NONE;
+        boolean keyboardVisible = windowInsets != null && windowInsets.isVisible(WindowInsetsCompat.Type.ime());
 
         boolean isAndroid15Plus = Build.VERSION.SDK_INT >= 35;
         View toolbarView = findViewById(R.id.tool_bar);
@@ -3237,8 +3427,10 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             toolbarView.getVisibility() == View.VISIBLE &&
             toolbarView.getParent() instanceof com.google.android.material.appbar.AppBarLayout;
 
+        boolean applyBottomInset = SafeAreaInsetsSupport.shouldInsetBottomForContainer(_options.getEnabledSafeMargin(), isAndroid15Plus);
+
         int statusBarTop = bars.top > 0 ? bars.top : getSystemStatusBarHeight();
-        int fallbackBottomInset = _options.getEnabledSafeMargin() ? getSystemNavigationBarHeight() : 0;
+        int fallbackBottomInset = applyBottomInset ? getSystemNavigationBarHeight() : 0;
         int safeBottomInset = SafeAreaInsetsSupport.resolveSafeBottomInsetWithFallback(
             bars.bottom,
             navigationBars.bottom,
@@ -3249,7 +3441,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             navigationBars.left,
             navigationBars.right,
             fallbackBottomInset,
-            _options.getEnabledSafeMargin()
+            applyBottomInset
         );
 
         int padTop = SafeAreaInsetsSupport.resolveContainerTopPadding(
@@ -3258,9 +3450,11 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             statusBarTop,
             appBarHandlesTopInset
         );
+        int imeBottom = SafeAreaInsetsSupport.resolveImeBottomInset(keyboardVisible, ime.bottom, isAndroid15Plus);
         int padBottom = SafeAreaInsetsSupport.resolveContainerBottomPadding(
-            _options.getEnabledSafeMargin(),
+            applyBottomInset,
             safeBottomInset,
+            imeBottom,
             appBarHandlesTopInset,
             statusBarTop
         );
@@ -5853,6 +6047,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
 
     @Override
     public void dismiss() {
+        unregisterConfigurationCallbacks();
         scheduleHostWebViewInsetRestore();
         detachBackLayer();
 
@@ -6963,7 +7158,12 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         Integer x = _options.getX();
         Integer y = _options.getY();
 
-        WindowManager.LayoutParams params = getWindow().getAttributes();
+        Window window = getWindow();
+        if (window == null) {
+            return;
+        }
+
+        WindowManager.LayoutParams params = window.getAttributes();
 
         // If both width and height are specified, use custom dimensions
         if (width != null && height != null) {
@@ -6973,6 +7173,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             params.x = (x != null) ? (int) getPixels(x) : 0;
             params.y = (y != null) ? (int) getPixels(y) : 0;
             params.gravity = Gravity.TOP | Gravity.START;
+            window.setAttributes(params);
         } else if (height != null && width == null) {
             // If only height is specified, use custom height with fullscreen width
             params.gravity = Gravity.TOP | Gravity.LEFT;
@@ -6981,15 +7182,16 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             params.x = 0;
             params.y = (y != null) ? (int) getPixels(y) : 0;
             params.gravity = Gravity.TOP | Gravity.START;
+            window.setAttributes(params);
         } else {
-            // Default to fullscreen
-            params.width = WindowManager.LayoutParams.MATCH_PARENT;
-            params.height = WindowManager.LayoutParams.MATCH_PARENT;
+            // Default to fullscreen. Prefer setLayout so MATCH_PARENT is not replaced by
+            // previously resolved portrait/landscape pixel sizes after a configuration change.
             params.x = 0;
             params.y = 0;
+            params.gravity = Gravity.TOP | Gravity.START;
+            window.setAttributes(params);
+            window.setLayout(WindowManager.LayoutParams.MATCH_PARENT, WindowManager.LayoutParams.MATCH_PARENT);
         }
-
-        getWindow().setAttributes(params);
     }
 
     /**

package/ios/Sources/InAppBrowserPlugin/InAppBrowserPlugin.swift

@@ -110,6 +110,42 @@ enum CustomSchemeOpenSupport {
     }
 }
 
+enum SecureWindowRedirectSupport {
+    /// The auth session reports any navigation on the callback scheme, so the redirect is
+    /// identified component-wise. Query items configured in the redirect URI are matched,
+    /// while any extra items (e.g. provider code, state) are ignored, unless they reuse a
+    /// configured name: parsers disagree over which duplicate takes precedence.
+    static func matches(_ callbackURL: URL, redirectUri: String) -> Bool {
+        guard let expected = URLComponents(string: redirectUri),
+              let received = URLComponents(url: callbackURL, resolvingAgainstBaseURL: false),
+              received.scheme?.lowercased() == expected.scheme?.lowercased(),
+              received.percentEncodedUser == expected.percentEncodedUser,
+              received.percentEncodedPassword == expected.percentEncodedPassword,
+              received.percentEncodedHost?.lowercased() == expected.percentEncodedHost?.lowercased(),
+              received.port == expected.port,
+              normalizedPath(received.percentEncodedPath) == normalizedPath(expected.percentEncodedPath) else {
+            return false
+        }
+
+        let expectedItems = expected.percentEncodedQueryItems ?? []
+        let receivedItems = received.percentEncodedQueryItems ?? []
+        let configuredDecodedNames = Set((expected.queryItems ?? []).map(\.name))
+        let configuredReceivedItemCount = (received.queryItems ?? []).filter {
+            configuredDecodedNames.contains($0.name)
+        }.count
+        guard configuredReceivedItemCount == expectedItems.count else {
+            return false
+        }
+        return Set(expectedItems.map(\.name)).allSatisfy { name in
+            receivedItems.filter { $0.name == name } == expectedItems.filter { $0.name == name }
+        }
+    }
+
+    private static func normalizedPath(_ path: String) -> String {
+        path == "/" ? "" : path
+    }
+}
+
 protocol ProxyRequestLocating {
     func hasPendingProxyRequest(_ requestId: String) -> Bool
 }
@@ -376,7 +412,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
         case aware = "AWARE"
         case fakeVisible = "FAKE_VISIBLE"
     }
-    private let pluginVersion: String = "8.13.3"
+    private let pluginVersion: String = "8.13.5"
     public let identifier = "CapgoInAppBrowserPlugin"
     public let jsName = "CapgoInAppBrowser"
     public let pluginMethods: [CAPPluginMethod] = [
@@ -1268,7 +1304,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
             return
         }
         let titleFontFamily = call.getString("titleFontFamily")
-        let isInspectable = call.getBool("isInspectable", false)
+        let isInspectable = call.getBool("isInspectable", self.bridge?.config.isWebDebuggable ?? false)
         let preventDeeplink = call.getBool("preventDeeplink", false)
         let openBlankTargetInWebView = call.getBool("openBlankTargetInWebView", false)
         let isAnimated = call.getBool("isAnimated", true)
@@ -2637,6 +2673,11 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
             return
         }
 
+        guard let callbackURLScheme = URL(string: redirectUri)?.scheme else {
+            call.reject("Invalid Redirect URI")
+            return
+        }
+
         // Store the call for later resolution
         self.openSecureWindowCall = call
 
@@ -2644,7 +2685,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
 
         // Open the URL in a secure browser window
         DispatchQueue.main.async {
-            let session = ASWebAuthenticationSession(url: url, callbackURLScheme: url.scheme) {
+            let session = ASWebAuthenticationSession(url: url, callbackURLScheme: callbackURLScheme) {
                 callbackURL, error in
 
                 // Clean up the stored call
@@ -2661,7 +2702,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
                     return
                 }
 
-                if !callbackURL.absoluteString.hasPrefix(redirectUri) {
+                if !SecureWindowRedirectSupport.matches(callbackURL, redirectUri: redirectUri) {
                     call.reject("Redirect URI does not match, expected " + redirectUri + " but got " + callbackURL.absoluteString)
                     return
                 }

package/ios/Sources/InAppBrowserPlugin/WKWebViewController.swift

@@ -439,6 +439,7 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
     open var httpMethod: String?
     open var httpBody: String?
     open var capBrowserPlugin: CapgoInAppBrowserPlugin?
+    open var isInspectable: Bool = false
     var instanceId: String = ""
     var shareDisclaimer: [String: Any]?
     var shareSubject: String?
@@ -2032,11 +2033,12 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
         }
     }
 
-    open func initWebview(isInspectable: Bool = true) {
+    open func initWebview(isInspectable: Bool = false) {
         if self.isWebViewInitialized {
             return
         }
         self.isWebViewInitialized = true
+        self.isInspectable = isInspectable
         self.startObservingKeyboardViewportChanges()
         self.view.backgroundColor = UIColor.white
 
@@ -2183,9 +2185,7 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
         //        }
 
         if #available(iOS 16.4, *) {
-            webView.isInspectable = true
-        } else {
-            // Fallback on earlier versions
+            webView.isInspectable = isInspectable
         }
 
         // First add the webView to view hierarchy
@@ -2341,7 +2341,7 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
         self.view.backgroundColor = parent.view.backgroundColor
         self.title = parent.title ?? request.url?.host ?? "Popup Window"
         self.navigationItem.title = self.title
-        self.initWebview()
+        self.initWebview(isInspectable: parent.isInspectable)
         return self.capableWebView
     }
 
@@ -3338,6 +3338,19 @@ extension WKWebViewController: WKUIDelegate {
         // This allows websites to access location when opened with openWebView
         decisionHandler(.grant)
     }
+
+    @available(iOS 15.0, *)
+    public func webView(_ webView: WKWebView, requestMediaCapturePermissionFor origin: WKSecurityOrigin, initiatedByFrame frame: WKFrameInfo, type: WKMediaCaptureType, decisionHandler: @escaping (WKPermissionDecision) -> Void) {
+        print("[InAppBrowser] Media capture permission requested for origin: \(origin.host)")
+
+        // Grant media capture permission automatically, matching Capacitor core's
+        // WebViewDelegationHandler. The OS-level camera/microphone permission
+        // (Info.plist usage description + system prompt) still applies — this only
+        // suppresses WebKit's extra per-origin prompt, which is not persisted
+        // across app launches (WebKit bug 220416) and would otherwise re-prompt
+        // users on every cold start.
+        decisionHandler(.grant)
+    }
 }
 
 // MARK: - Host Blocking Utilities

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capgo/capacitor-inappbrowser",
-  "version": "8.13.3",
+  "version": "8.13.5",
   "description": "Capacitor plugin in app browser",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",