@capgo/capacitor-inappbrowser 8.15.2 → 8.16.2

package/README.md

@@ -1584,7 +1584,9 @@ See the README section "openSecureWindow (OAuth)" for full setup examples.
 | **`jsInterface`**                      |                                                                                                                                                                        | JavaScript Interface: The webview automatically injects a JavaScript interface providing: - `window.mobileApp.close()`: Closes the webview from JavaScript - `window.mobileApp.postMessage(obj)`: Sends a message to the app (listen via "messageFromWebview" event) - `window.mobileApp.hide()` / `window.mobileApp.show()` when allowWebViewJsVisibilityControl is true in CapacitorConfig - `window.mobileApp.takeScreenshot()` when `allowScreenshotsFromWebPage` is true                                                                                                                                                                                                                                                                                                                                                                                                                                          |                                                               | 6.10.0 |
 | **`allowScreenshotsFromWebPage`**      | <code>boolean</code>                                                                                                                                                   | Allows page JavaScript to call `window.mobileApp.takeScreenshot()`. Disabled by default so only the host app can trigger native screenshots through the plugin API.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | <code>false</code>                                            | 8.4.0  |
 | **`captureConsoleLogs`**               | <code>boolean</code>                                                                                                                                                   | Emits `consoleMessage` events for JavaScript `console.*` output coming from the managed page. Useful when the webview stays hidden and you still need page-level diagnostics.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | <code>false</code>                                            | 8.6.0  |
-| **`persistWebViewData`**               | <code>boolean</code>                                                                                                                                                   | Controls whether the webview should persist website data such as cache, cookies, local storage, IndexedDB, and session data. When false, iOS uses a non-persistent `WKWebsiteDataStore`. Android disables per-view cache and DOM/database storage where the system WebView supports it. Android cookies use the shared WebView cookie store; clearing them also affects the host WebView, so prefer per-URL cookie helpers instead of relying on process-global wipes.                                                                                                                                                                                                                                                                                                                                                                                                                                                 | <code>true</code>                                             | 8.6.36 |
+| **`persistWebViewData`**               | <code>boolean</code>                                                                                                                                                   | Controls whether the webview should persist website data such as cache, cookies, local storage, IndexedDB, and session data. When false, iOS uses a non-persistent `WKWebsiteDataStore`. Android disables per-view cache and database storage where the system WebView supports it while keeping DOM storage available so SPAs can use `localStorage`. Android cookies use the shared WebView cookie store; clearing them also affects the host WebView, so prefer per-URL cookie helpers instead of relying on process-global wipes.                                                                                                                                                                                                                                                                                                                                                                                  | <code>true</code>                                             | 8.6.36 |
+| **`clearCookiesOnOpen`**               | <code>boolean</code>                                                                                                                                                   | Clear all cookies from the InAppBrowser data store before the first navigation of this webview. Cordova `clearcache: 'yes'` parity. On Android, uses process-global `CookieManager.removeAllCookies()` and blocks until the wipe completes. On iOS, clears cookies from the webview's `WKWebsiteDataStore` (isolated plugin store by default). On Web this is a no-op.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | <code>false</code>                                            | 8.16.0 |
+| **`clearCacheOnOpen`**                 | <code>boolean</code>                                                                                                                                                   | Clear cached website data before the first navigation of this webview. Cordova `cleardata: 'yes'` parity. On Android, calls `WebView.clearCache(true)` after the webview is created. On iOS, removes disk and memory cache from the webview's `WKWebsiteDataStore`. On Web this is a no-op.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | <code>false</code>                                            | 8.16.0 |
 | **`useSharedDataStore`**               | <code>boolean</code>                                                                                                                                                   | Share the host Capacitor WebView's website data store (cookies, local storage, etc.). On iOS 17+, InAppBrowser uses an isolated plugin-owned `WKWebsiteDataStore` by default so host and browser data stay separate. Set this to `true` to use `WKWebsiteDataStore.default()` instead, which shares session cookies with the Capacitor host WebView. Useful for SSO / OIDC silent login when the IdP session was established in the main app WebView. Requires `persistWebViewData: true` (the default). When `persistWebViewData` is false, a non-persistent store is used and this option has no effect. On Android this is a no-op: cookies are already process-global via `CookieManager`. On Web this is a no-op. Warning: clearing cookies/cache for a webview opened with this flag can affect the host WebView on iOS, because both share the same store. `clearAllBrowsingData()` still skips the host store. | <code>false</code>                                            | 8.13.6 |
 | **`clientCertificate`**                | <code>'none' \| 'prompt'</code>                                                                                                                                        | Controls Android TLS client certificate prompts during HTTPS handshakes. Use `prompt` to show the system certificate picker; omit or use `none` to cancel silently (default).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | <code>"none"</code>                                           | 8.7.5  |
 | **`clientCertificatePrompt`**          | <code>boolean</code>                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |                                                               |        |
@@ -1628,7 +1630,7 @@ See the README section "openSecureWindow (OAuth)" for full setup examples.
 | **`preventDeeplink`**                  | <code>boolean</code>                                                                                                                                                   | If true, deeplinks and external app hand-off are blocked and stay in the webview. If false (default), custom schemes such as `tel:`, `mailto:`, and `sms:` open natively. On iOS, listing a custom scheme under `LSApplicationQueriesSchemes` is only required when you rely on `canOpenURL` for that scheme (for example `instagram://`). It is not required for HTTPS `authorizedAppLinks`, and `mailto`/`tel`/`sms` open without that Info.plist entry.                                                                                                                                                                                                                                                                                                                                                                                                                                                             | <code>false</code>                                            | 0.1.0  |
 | **`openBlankTargetInWebView`**         | <code>boolean</code>                                                                                                                                                   | When true, HTTP and HTTPS links opened from `target="_blank"` anchors stay in the current webview instead of spawning a popup or opening in the system browser. By default, blank-target HTTP(S) links stay inside the plugin as managed popups that share cookies with the opener; enabling this option keeps everything in the same tab. Custom schemes such as `tel:` and `mailto:` and authorized app links still prefer their native handlers unless `preventDeeplink` is enabled.                                                                                                                                                                                                                                                                                                                                                                                                                                | <code>false</code>                                            | 8.5.6  |
 | **`authorizedAppLinks`**               | <code>string[]</code>                                                                                                                                                  | List of base URLs whose hosts are treated as authorized App Links (Android) and Universal Links (iOS). - On both platforms, only HTTP(S) links whose host matches any entry in this list will attempt to leave the in-app browser for the native / system handler. - iOS tries a Universal Link first (`universalLinksOnly`), then falls back to a normal system open (App Store, Safari, etc.). Only if both fail does the URL stay in-webview. - Android uses an `ACTION_VIEW` intent for matching hosts. - Matching is host-based (case-insensitive), ignoring the "www." prefix. - HTTPS hosts do not need `LSApplicationQueriesSchemes`; that Info.plist key is for custom schemes like `instagram://`, not `https://instagram.com`. - When `preventDeeplink` is enabled, all external handling is blocked regardless of this list.                                                                               | <code>[]</code>                                               | 7.12.0 |
-| **`enabledSafeBottomMargin`**          | <code>boolean</code>                                                                                                                                                   | If true, the webView is inset by the bottom system bar (navigation bar) so bottom-anchored content stays reachable. On Android 15+ the browser window is always edge-to-edge, so the bottom inset is applied there regardless of this option.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | <code>false</code>                                            | 7.13.0 |
+| **`enabledSafeBottomMargin`**          | <code>boolean</code>                                                                                                                                                   | If true, the webView is inset by the bottom system bar (navigation bar) so bottom-anchored content stays reachable. When false (default), the webView can extend behind the navigation bar and apps can use `env(safe-area-inset-*)` for layout, matching the main Capacitor WebView. On pre-API 30 devices with a transparent navigation bar, bottom padding may still be applied when the window lays out behind the navigation bar regardless of this option.                                                                                                                                                                                                                                                                                                                                                                                                                                                       | <code>false</code>                                            | 7.13.0 |
 | **`enabledSafeTopMargin`**             | <code>boolean</code>                                                                                                                                                   | If false, the webView will extend behind the status bar for true full-screen immersive content. When true (default), respects the safe area at the top of the screen. Works independently of toolbarType - use for full-screen video players, games, or immersive web apps. On Android, when a toolbar is visible the toolbar itself provides that safe area; with `toolbarType: 'blank'` on Android 15+ the status bar inset is applied to the webView instead.                                                                                                                                                                                                                                                                                                                                                                                                                                                       | <code>true</code>                                             | 8.2.0  |
 | **`useTopInset`**                      | <code>boolean</code>                                                                                                                                                   | When true, applies the system status bar inset to the top of the WebView on Android even when the window is not edge-to-edge (before Android 15). Keeps the legacy 0px inset by default for apps that handle padding themselves. On Android 15+ this is not needed: without a visible toolbar the status bar inset already follows `enabledSafeTopMargin`.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | <code>false</code>                                            |        |
 | **`enableGooglePaySupport`**           | <code>boolean</code>                                                                                                                                                   | enableGooglePaySupport: if true, enables support for Google Pay popups and Payment Request API. This fixes OR_BIBED_15 errors by allowing popup windows and configuring Cross-Origin-Opener-Policy. Only enable this if you need Google Pay functionality as it allows popup windows. When enabled: - Allows popup windows for Google Pay authentication - Sets proper CORS headers for Payment Request API - Enables multiple window support in WebView - Configures secure context for payment processing                                                                                                                                                                                                                                                                                                                                                                                                            | <code>false</code>                                            | 7.13.0 |

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/CapgoInAppBrowserPlugin.java

@@ -20,7 +20,6 @@ import android.util.Log;
 import android.webkit.CookieManager;
 import android.webkit.PermissionRequest;
 import android.webkit.WebView;
-import androidx.activity.result.ActivityResult;
 import androidx.activity.result.ActivityResultLauncher;
 import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
@@ -63,8 +62,7 @@ import org.json.JSONObject;
         @Permission(alias = "camera", strings = { Manifest.permission.CAMERA }),
         @Permission(alias = "microphone", strings = { Manifest.permission.RECORD_AUDIO }),
         @Permission(alias = "storage", strings = { Manifest.permission.READ_EXTERNAL_STORAGE })
-    },
-    requestCodes = { WebViewDialog.FILE_CHOOSER_REQUEST_CODE }
+    }
 )
 public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.PermissionHandler {
 
@@ -108,7 +106,6 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
     private boolean currentPermissionNeedsCamera = false;
     private boolean currentPermissionNeedsMicrophone = false;
 
-    private ActivityResultLauncher<Intent> fileChooserLauncher;
     private ActivityResultLauncher<String[]> webPermissionLauncher;
     private PluginCall pendingCameraPermissionCall;
 
@@ -118,10 +115,6 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
     @Override
     public void load() {
         super.load();
-        fileChooserLauncher = getActivity().registerForActivityResult(
-            new ActivityResultContracts.StartActivityForResult(),
-            this::handleFileChooserResult
-        );
         webPermissionLauncher = getActivity().registerForActivityResult(
             new ActivityResultContracts.RequestMultiplePermissions(),
             this::handleWebPermissionResult
@@ -355,6 +348,7 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         );
         dialog.setInstanceId(webViewId);
         dialog.activity = CapgoInAppBrowserPlugin.this.getActivity();
+        dialog.bindToHostActivity();
         registerWebView(webViewId, dialog, makeActive);
         return dialog;
     }
@@ -525,59 +519,6 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         return targetWebViews;
     }
 
-    private WebViewDialog findFileChooserDialog() {
-        if (activeWebViewId != null) {
-            WebViewDialog dialog = webViewDialogs.get(activeWebViewId);
-            if (dialog != null && dialog.mFilePathCallback != null) {
-                return dialog;
-            }
-        }
-
-        if (webViewDialog != null && webViewDialog.mFilePathCallback != null) {
-            return webViewDialog;
-        }
-
-        for (WebViewDialog dialog : webViewDialogs.values()) {
-            if (dialog != null && dialog.mFilePathCallback != null) {
-                return dialog;
-            }
-        }
-
-        return null;
-    }
-
-    private void handleFileChooserResult(ActivityResult result) {
-        WebViewDialog webViewDialog = findFileChooserDialog();
-        if (webViewDialog != null && webViewDialog.mFilePathCallback != null) {
-            Uri[] results = null;
-            Intent data = result.getData();
-
-            if (result.getResultCode() == Activity.RESULT_OK) {
-                // Handle camera capture result
-                if (webViewDialog.tempCameraUri != null && (data == null || data.getData() == null)) {
-                    results = new Uri[] { webViewDialog.tempCameraUri };
-                }
-                // Handle regular file picker result
-                else if (data != null) {
-                    if (data.getClipData() != null) {
-                        // Handle multiple files
-                        int count = data.getClipData().getItemCount();
-                        results = new Uri[count];
-                        for (int i = 0; i < count; i++) {
-                            results[i] = data.getClipData().getItemAt(i).getUri();
-                        }
-                    } else if (data.getData() != null) {
-                        // Handle single file
-                        results = new Uri[] { data.getData() };
-                    }
-                }
-            }
-
-            // Send the result to WebView and clean up
-            webViewDialog.completeLegacyFileChooserResult(results);
-        }
-    }
-
     public void handleMicrophonePermissionRequest(PermissionRequest request) {
         if (request == null) {
             return;
@@ -796,6 +737,16 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         );
     }
 
+    private CustomTabColorSchemeParams buildCustomTabColorScheme(int colorInt) {
+        return applyCustomTabNavigationBarColor(new CustomTabColorSchemeParams.Builder().setToolbarColor(colorInt), colorInt).build();
+    }
+
+    @SuppressWarnings("deprecation")
+    private CustomTabColorSchemeParams.Builder applyCustomTabNavigationBarColor(CustomTabColorSchemeParams.Builder builder, int colorInt) {
+        // androidx.browser 1.9.0 still exposes only setNavigationBarColor; no non-deprecated replacement.
+        return builder.setNavigationBarColor(colorInt);
+    }
+
     @PluginMethod
     public void open(PluginCall call) {
         String url = call.getString("url");
@@ -828,10 +779,7 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         if (toolbarColor != null) {
             try {
                 int colorInt = Color.parseColor(toolbarColor);
-                CustomTabColorSchemeParams colorParams = new CustomTabColorSchemeParams.Builder()
-                    .setToolbarColor(colorInt)
-                    .setNavigationBarColor(colorInt)
-                    .build();
+                CustomTabColorSchemeParams colorParams = buildCustomTabColorScheme(colorInt);
                 builder.setDefaultColorSchemeParams(colorParams);
                 builder.setColorSchemeParams(CustomTabsIntent.COLOR_SCHEME_DARK, colorParams);
             } catch (IllegalArgumentException e) {
@@ -1152,6 +1100,8 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
         options.setHandleDownloads(Boolean.TRUE.equals(call.getBoolean("handleDownloads", false)));
 
         options.setPersistWebViewData(call.getBoolean("persistWebViewData", true));
+        options.setClearCookiesOnOpen(Boolean.TRUE.equals(call.getBoolean("clearCookiesOnOpen", false)));
+        options.setClearCacheOnOpen(Boolean.TRUE.equals(call.getBoolean("clearCacheOnOpen", false)));
         // No-op on Android: CookieManager is already process-global (API parity with iOS).
         options.setUseSharedDataStore(Boolean.TRUE.equals(call.getBoolean("useSharedDataStore", false)));
         // Set text zoom if specified in options (default is 100)

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/InAppBrowserPlugin.java

@@ -11,7 +11,6 @@ import com.getcapacitor.annotation.Permission;
         @Permission(alias = "camera", strings = { Manifest.permission.CAMERA }),
         @Permission(alias = "microphone", strings = { Manifest.permission.RECORD_AUDIO }),
         @Permission(alias = "storage", strings = { Manifest.permission.READ_EXTERNAL_STORAGE })
-    },
-    requestCodes = { WebViewDialog.FILE_CHOOSER_REQUEST_CODE }
+    }
 )
 public class InAppBrowserPlugin extends CapgoInAppBrowserPlugin {}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/OpenTimeBrowsingDataClearSupport.java

@@ -0,0 +1,40 @@
+package ee.forgr.capacitor_inappbrowser;
+
+import android.webkit.CookieManager;
+import android.webkit.WebView;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * Applies cordova-style open-time cookie/cache clearing before the first navigation.
+ */
+final class OpenTimeBrowsingDataClearSupport {
+
+    private static final long COOKIE_CLEAR_TIMEOUT_SECONDS = 10;
+
+    private OpenTimeBrowsingDataClearSupport() {}
+
+    static void applyBeforeFirstNavigation(
+        CookieManager cookieManager,
+        WebView webView,
+        boolean clearCookiesOnOpen,
+        boolean clearCacheOnOpen
+    ) {
+        if (clearCookiesOnOpen) {
+            final CountDownLatch latch = new CountDownLatch(1);
+            cookieManager.removeAllCookies((value) -> latch.countDown());
+            try {
+                if (!latch.await(COOKIE_CLEAR_TIMEOUT_SECONDS, TimeUnit.SECONDS)) {
+                    throw new IllegalStateException("Timed out waiting for cookie clear");
+                }
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+            cookieManager.flush();
+        }
+
+        if (clearCacheOnOpen && webView != null) {
+            webView.clearCache(true);
+        }
+    }
+}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/Options.java

@@ -204,6 +204,8 @@ public class Options {
     private boolean captureConsoleLogs = false;
     private boolean handleDownloads = false;
     private boolean persistWebViewData = true;
+    private boolean clearCookiesOnOpen = false;
+    private boolean clearCacheOnOpen = false;
     /** Accepted for API parity with iOS; Android cookies are already process-global. */
     private boolean useSharedDataStore = false;
     private InvisibilityMode invisibilityMode = InvisibilityMode.AWARE;
@@ -320,6 +322,22 @@ public class Options {
         this.persistWebViewData = persistWebViewData;
     }
 
+    public boolean getClearCookiesOnOpen() {
+        return clearCookiesOnOpen;
+    }
+
+    public void setClearCookiesOnOpen(boolean clearCookiesOnOpen) {
+        this.clearCookiesOnOpen = clearCookiesOnOpen;
+    }
+
+    public boolean getClearCacheOnOpen() {
+        return clearCacheOnOpen;
+    }
+
+    public void setClearCacheOnOpen(boolean clearCacheOnOpen) {
+        this.clearCacheOnOpen = clearCacheOnOpen;
+    }
+
     public boolean getUseSharedDataStore() {
         return useSharedDataStore;
     }
@@ -857,6 +875,8 @@ public class Options {
         copy.setBlockedHosts(new ArrayList<>(getBlockedHosts()));
         copy.setWidth(width);
         copy.setPersistWebViewData(persistWebViewData);
+        copy.setClearCookiesOnOpen(clearCookiesOnOpen);
+        copy.setClearCacheOnOpen(clearCacheOnOpen);
         copy.setUseSharedDataStore(useSharedDataStore);
         copy.setHeight(height);
         copy.setToBack(toBack);

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/SafeAreaInsetsSupport.java

@@ -119,12 +119,32 @@ final class SafeAreaInsetsSupport {
     }
 
     /**
-     * Whether the WebView container must be inset for the bottom system bar. On Android 15+ the dialog
-     * is forced edge-to-edge (decorFitsSystemWindows=false), so the window always draws under the
-     * navigation bar and insetting is mandatory to keep bottom content on-screen, regardless of the
-     * enabledSafeBottomMargin opt-in that older versions honour.
+     * Whether the WebView container must be inset for the bottom system bar. Follows the
+     * enabledSafeBottomMargin opt-in on all API levels, including Android 15+ edge-to-edge windows,
+     * so disabling the flag matches Capacitor full-screen behaviour (#672). Pre-API 30 windows that
+     * lay out behind a transparent navigation bar still need the inset regardless of the opt-in.
      */
+    static boolean shouldInsetBottomForContainer(boolean enabledSafeBottomMargin, boolean isEdgeToEdge, boolean layoutBehindNavigationBar) {
+        return enabledSafeBottomMargin || layoutBehindNavigationBar;
+    }
+
     static boolean shouldInsetBottomForContainer(boolean enabledSafeBottomMargin, boolean isEdgeToEdge) {
-        return enabledSafeBottomMargin || isEdgeToEdge;
+        return shouldInsetBottomForContainer(enabledSafeBottomMargin, isEdgeToEdge, false);
+    }
+
+    /**
+     * CSS custom-property inset for the top safe area. Only published when enabledSafeTopMargin is
+     * on; otherwise apps rely on env(safe-area-inset-*) like the main Capacitor WebView (#672).
+     */
+    static int cssTopInset(boolean enabledSafeTopMargin, int containerTopPadding) {
+        return enabledSafeTopMargin ? Math.max(0, containerTopPadding) : 0;
+    }
+
+    /**
+     * CSS custom-property inset for the bottom safe area. Only published when enabledSafeBottomMargin
+     * is on; container padding and env() insets are handled separately (#672).
+     */
+    static int cssBottomInset(boolean enabledSafeBottomMargin, int safeBottomInset) {
+        return enabledSafeBottomMargin ? Math.max(0, safeBottomInset) : 0;
     }
 }

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/SystemUiChromeSupport.java

@@ -0,0 +1,109 @@
+package ee.forgr.capacitor_inappbrowser;
+
+import android.graphics.Color;
+import android.os.Build;
+import android.view.View;
+import android.view.Window;
+import android.view.WindowManager;
+import androidx.core.view.WindowCompat;
+import androidx.core.view.WindowInsetsControllerCompat;
+
+/**
+ * Centralizes window chrome decisions so WebViewDialog can avoid deprecated system UI APIs on
+ * Android 15+ while keeping API 24–34 behavior unchanged.
+ */
+final class SystemUiChromeSupport {
+
+    static final int EDGE_TO_EDGE_SDK = Build.VERSION_CODES.VANILLA_ICE_CREAM;
+
+    private SystemUiChromeSupport() {}
+
+    static boolean requiresEdgeToEdgeChrome(int sdkInt) {
+        return sdkInt >= EDGE_TO_EDGE_SDK;
+    }
+
+    static boolean shouldApplyLegacySystemBarColors(int sdkInt) {
+        return sdkInt < EDGE_TO_EDGE_SDK;
+    }
+
+    static boolean shouldUsePreApi30LayoutFlags(int sdkInt) {
+        return sdkInt < Build.VERSION_CODES.R;
+    }
+
+    static boolean usesLayoutBehindNavigationBar(int sdkInt, boolean edgeToEdge) {
+        return !edgeToEdge && shouldUsePreApi30LayoutFlags(sdkInt);
+    }
+
+    static void setDecorFitsSystemWindows(Window window, boolean decorFitsSystemWindows) {
+        if (window == null) {
+            return;
+        }
+        WindowCompat.setDecorFitsSystemWindows(window, decorFitsSystemWindows);
+    }
+
+    static void prepareInitialDialogWindow(Window window) {
+        if (window == null) {
+            return;
+        }
+
+        window.addFlags(WindowManager.LayoutParams.FLAG_DRAWS_SYSTEM_BAR_BACKGROUNDS);
+        if (shouldApplyLegacySystemBarColors(Build.VERSION.SDK_INT)) {
+            applyLegacySystemBarColors(window, Color.TRANSPARENT, null);
+            clearLegacyTranslucentStatusFlag(window);
+        }
+    }
+
+    static void applyDialogWindowChrome(
+        Window window,
+        View decorView,
+        boolean edgeToEdge,
+        Integer statusBarColor,
+        Integer navigationBarColor,
+        Boolean lightStatusBars
+    ) {
+        if (window == null || decorView == null) {
+            return;
+        }
+
+        if (edgeToEdge) {
+            setDecorFitsSystemWindows(window, false);
+        } else if (!shouldUsePreApi30LayoutFlags(Build.VERSION.SDK_INT)) {
+            setDecorFitsSystemWindows(window, true);
+            applyLegacySystemBarColors(window, statusBarColor, navigationBarColor);
+        } else {
+            applyPreApi30LayoutBehindNavigationBar(decorView);
+            applyLegacySystemBarColors(window, statusBarColor, navigationBarColor);
+        }
+
+        WindowInsetsControllerCompat controller = new WindowInsetsControllerCompat(window, decorView);
+        if (lightStatusBars != null) {
+            controller.setAppearanceLightStatusBars(lightStatusBars);
+        }
+    }
+
+    @SuppressWarnings("deprecation")
+    private static void applyPreApi30LayoutBehindNavigationBar(View decorView) {
+        decorView.setSystemUiVisibility(View.SYSTEM_UI_FLAG_LAYOUT_STABLE | View.SYSTEM_UI_FLAG_LAYOUT_HIDE_NAVIGATION);
+    }
+
+    @SuppressWarnings("deprecation")
+    static void applyLegacySystemBarColors(Window window, Integer statusBarColor, Integer navigationBarColor) {
+        if (window == null || !shouldApplyLegacySystemBarColors(Build.VERSION.SDK_INT)) {
+            return;
+        }
+
+        if (statusBarColor != null && Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) {
+            window.setStatusBarColor(statusBarColor);
+        }
+        if (navigationBarColor != null && Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) {
+            window.setNavigationBarColor(navigationBarColor);
+        }
+    }
+
+    @SuppressWarnings("deprecation")
+    private static void clearLegacyTranslucentStatusFlag(Window window) {
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) {
+            window.clearFlags(WindowManager.LayoutParams.FLAG_TRANSLUCENT_STATUS);
+        }
+    }
+}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/WebViewCustomFullscreenSupport.java

@@ -0,0 +1,49 @@
+package ee.forgr.capacitor_inappbrowser;
+
+import android.view.View;
+
+/**
+ * Testable helpers for HTML5/iframe fullscreen routed through WebChromeClient custom views
+ * (e.g. embedded YouTube fullscreen).
+ */
+final class WebViewCustomFullscreenSupport {
+
+    private WebViewCustomFullscreenSupport() {}
+
+    static boolean isCustomFullscreenActive(Object customFullscreenView) {
+        return customFullscreenView != null;
+    }
+
+    static boolean shouldRejectDuplicateShow(boolean isActive) {
+        return isActive;
+    }
+
+    static boolean shouldConsumeBackPress(boolean isActive) {
+        return isActive;
+    }
+
+    @SuppressWarnings("deprecation")
+    static int immersiveFullscreenSystemUiVisibility() {
+        return (
+            View.SYSTEM_UI_FLAG_LAYOUT_STABLE |
+            View.SYSTEM_UI_FLAG_LAYOUT_HIDE_NAVIGATION |
+            View.SYSTEM_UI_FLAG_LAYOUT_FULLSCREEN |
+            View.SYSTEM_UI_FLAG_HIDE_NAVIGATION |
+            View.SYSTEM_UI_FLAG_FULLSCREEN |
+            View.SYSTEM_UI_FLAG_IMMERSIVE_STICKY
+        );
+    }
+
+    static boolean shouldUseHostActivityWindow(boolean backLayerActive) {
+        return backLayerActive;
+    }
+
+    static boolean shouldRegisterHostBackHandler(boolean backLayerActive) {
+        return backLayerActive;
+    }
+
+    @SuppressWarnings("deprecation")
+    static int restoredSystemUiVisibility() {
+        return View.SYSTEM_UI_FLAG_VISIBLE;
+    }
+}