@capgo/capacitor-inappbrowser 8.7.5 → 8.7.7

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/CapgoInAppBrowserPlugin.java

@@ -50,6 +50,8 @@ import java.util.Iterator;
 import java.util.List;
 import java.util.Map;
 import java.util.UUID;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
 import java.util.regex.Pattern;
 import java.util.regex.PatternSyntaxException;
 import org.json.JSONException;
@@ -66,6 +68,15 @@ import org.json.JSONObject;
 )
 public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.PermissionHandler {
 
+    private static final ExecutorService PROXY_RESPONSE_EXECUTOR = Executors.newFixedThreadPool(
+        Math.max(4, Runtime.getRuntime().availableProcessors()),
+        (runnable) -> {
+            Thread thread = new Thread(runnable, "CapgoInAppBrowser-ProxyResponse");
+            thread.setDaemon(true);
+            return thread;
+        }
+    );
+
     private final String pluginVersion = "8.6.17";
 
     private boolean resolveClientCertificatePrompt(PluginCall call) {
@@ -1684,8 +1695,10 @@ public class CapgoInAppBrowserPlugin extends Plugin implements WebViewDialog.Per
             return;
         }
 
-        dialog.handleProxyResponse(requestId, decision);
-        call.resolve();
+        PROXY_RESPONSE_EXECUTOR.execute(() -> {
+            dialog.handleProxyResponse(requestId, decision);
+            call.resolve();
+        });
     }
 
     @PluginMethod

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/ProxyBridge.java

@@ -58,11 +58,10 @@ public class ProxyBridge {
         if (requestId == null) {
             return null;
         }
-        StoredRequest storedRequest = storedRequests.remove(requestId);
-        if (storedRequest != null) {
-            storedRequestOrder.remove(requestId);
-        }
-        return storedRequest;
+        // Do not scan storedRequestOrder here: ConcurrentLinkedQueue.remove is O(n) and
+        // serializes parallel bridge-backed proxy requests. Stale queue ids are purged lazily
+        // in cleanupExpiredRequests().
+        return storedRequests.remove(requestId);
     }
 
     private void cleanupExpiredRequests(long now) {

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/ProxyRequestSupport.java

@@ -3,6 +3,7 @@ package ee.forgr.capacitor_inappbrowser;
 import com.getcapacitor.JSObject;
 import java.io.IOException;
 import java.net.URL;
+import java.net.URLConnection;
 import java.nio.charset.StandardCharsets;
 import java.util.Base64;
 import java.util.HashMap;
@@ -22,6 +23,8 @@ final class ProxyRequestSupport {
 
     record ParsedResponseHeaders(Map<String, String> responseHeaders, List<String> cookieHeaders) {}
 
+    record ProxiedResponseMetadata(String contentType, Map<String, String> headers) {}
+
     static final int SYNTHETIC_NATIVE_FAILURE_STATUS = 599;
     static final String SYNTHETIC_NATIVE_FAILURE_HEADER = "X-Capgo-Proxy-Error";
 
@@ -59,7 +62,7 @@ final class ProxyRequestSupport {
     private ProxyRequestSupport() {}
 
     static boolean shouldInjectBridge(Options options) {
-        return options != null && options.shouldEnableNativeProxy();
+        return options != null && usesLegacyJsProxyMode(options);
     }
 
     static boolean usesLegacyJsProxyMode(Options options) {
@@ -109,6 +112,27 @@ final class ProxyRequestSupport {
         return !usesLegacyJsProxyMode(options) || matchesProxyRequestsPattern(options.getProxyRequestsPattern(), requestUrl);
     }
 
+    static boolean shouldBootstrapInitialProxyLoad(Options options) {
+        if (options == null || options.isPopupWindowMode()) {
+            return false;
+        }
+        String initialUrl = options.getUrl();
+        if (initialUrl == null || initialUrl.isBlank()) {
+            return false;
+        }
+        if (!options.shouldEnableNativeProxy()) {
+            return false;
+        }
+        if (shouldDelegateLegacyJsProxyRequest(options, initialUrl)) {
+            return true;
+        }
+        return shouldHandleNonBridgeRequest(options, initialUrl) && !usesLegacyJsProxyMode(options);
+    }
+
+    static boolean shouldReturnSyntheticNativeFailure(boolean bridgeBackedRequest, Options options, String requestUrl) {
+        return bridgeBackedRequest || shouldHandleNonBridgeRequest(options, requestUrl);
+    }
+
     static boolean isBridgeMarkerRequestUrl(String requestUrl) {
         if (requestUrl == null || requestUrl.isBlank()) {
             return false;
@@ -405,16 +429,164 @@ final class ProxyRequestSupport {
         return new WebResourceResponseMetadata(mimeType, encoding);
     }
 
+    static ProxiedResponseMetadata normalizeProxiedResponseMetadata(
+        String contentType,
+        Map<String, String> responseHeaders,
+        String requestUrl
+    ) {
+        Map<String, String> headers = responseHeaders != null ? new LinkedHashMap<>(responseHeaders) : new LinkedHashMap<>();
+        String headerContentType = findHeaderIgnoreCase(headers, "Content-Type");
+        String resolvedContentType = resolveProxiedContentType(firstNonEmpty(contentType, headerContentType), requestUrl);
+        if (resolvedContentType == null || resolvedContentType.isBlank()) {
+            resolvedContentType = "application/octet-stream";
+        }
+        if (!hasHeaderIgnoreCase(headers, "Content-Type")) {
+            headers.put("Content-Type", resolvedContentType);
+        }
+        return new ProxiedResponseMetadata(resolvedContentType, headers);
+    }
+
     static WebResourceResponseMetadata resolveWebResourceResponseConstructorMetadata(
         String contentType,
         Map<String, String> responseHeaders
     ) {
-        if (hasHeaderIgnoreCase(responseHeaders, "Content-Type")) {
+        String headerContentType = findHeaderIgnoreCase(responseHeaders, "Content-Type");
+        if (headerContentType != null && shouldDeferConstructorMimeTypeToContentTypeHeader(headerContentType)) {
             return new WebResourceResponseMetadata(null, null);
         }
         return resolveWebResourceResponseMetadata(contentType, responseHeaders);
     }
 
+    static String resolveProxiedContentType(String contentType, String requestUrl) {
+        String mimeOnly = extractMimeType(contentType);
+        if (mimeOnly != null && !mimeOnly.isBlank() && !isGenericProxiedMimeType(mimeOnly)) {
+            if (shouldNormalizeSvgContentType(requestUrl, mimeOnly)) {
+                return "image/svg+xml";
+            }
+            return contentType.trim();
+        }
+
+        String guessedContentType = guessContentTypeFromRequestUrl(requestUrl);
+        if (guessedContentType != null) {
+            return guessedContentType;
+        }
+
+        return contentType != null && !contentType.isBlank() ? contentType.trim() : null;
+    }
+
+    static String guessContentTypeFromRequestUrl(String requestUrl) {
+        if (requestUrl == null || requestUrl.isBlank()) {
+            return null;
+        }
+
+        String fileName;
+        try {
+            fileName = new URL(requestUrl).getPath();
+        } catch (Exception error) {
+            return null;
+        }
+        if (fileName == null || fileName.isBlank()) {
+            return null;
+        }
+
+        int slashIndex = fileName.lastIndexOf('/');
+        if (slashIndex >= 0) {
+            fileName = fileName.substring(slashIndex + 1);
+        }
+        if (fileName.isBlank()) {
+            return null;
+        }
+
+        String guessedType = URLConnection.guessContentTypeFromName(fileName);
+        if (guessedType != null && !guessedType.isBlank()) {
+            return guessedType;
+        }
+
+        int dotIndex = fileName.lastIndexOf('.');
+        if (dotIndex < 0 || dotIndex == fileName.length() - 1) {
+            return null;
+        }
+        String extension = fileName.substring(dotIndex + 1).toLowerCase(Locale.US);
+        return switch (extension) {
+            case "svg" -> "image/svg+xml";
+            case "png" -> "image/png";
+            case "jpg", "jpeg" -> "image/jpeg";
+            case "gif" -> "image/gif";
+            case "webp" -> "image/webp";
+            case "pdf" -> "application/pdf";
+            case "json" -> "application/json";
+            case "txt" -> "text/plain";
+            case "csv" -> "text/csv";
+            case "html", "htm" -> "text/html";
+            case "xhtml" -> "application/xhtml+xml";
+            default -> null;
+        };
+    }
+
+    private static boolean shouldNormalizeSvgContentType(String requestUrl, String mimeType) {
+        if (!"svg".equalsIgnoreCase(fileExtensionFromRequestUrl(requestUrl))) {
+            return false;
+        }
+        String normalizedMimeType = mimeType.toLowerCase(Locale.US);
+        return (
+            isGenericProxiedMimeType(normalizedMimeType) ||
+            "text/xml".equals(normalizedMimeType) ||
+            "application/xml".equals(normalizedMimeType)
+        );
+    }
+
+    private static String fileExtensionFromRequestUrl(String requestUrl) {
+        if (requestUrl == null || requestUrl.isBlank()) {
+            return "";
+        }
+        try {
+            String path = new URL(requestUrl).getPath();
+            if (path == null || path.isBlank()) {
+                return "";
+            }
+            int slashIndex = path.lastIndexOf('/');
+            String fileName = slashIndex >= 0 ? path.substring(slashIndex + 1) : path;
+            int dotIndex = fileName.lastIndexOf('.');
+            if (dotIndex < 0 || dotIndex == fileName.length() - 1) {
+                return "";
+            }
+            return fileName.substring(dotIndex + 1);
+        } catch (Exception error) {
+            return "";
+        }
+    }
+
+    private static String extractMimeType(String contentType) {
+        if (contentType == null || contentType.isBlank()) {
+            return null;
+        }
+        String mimeType = contentType.split(";")[0].trim();
+        return mimeType.isEmpty() ? null : mimeType;
+    }
+
+    private static boolean isGenericProxiedMimeType(String mimeType) {
+        if (mimeType == null || mimeType.isBlank()) {
+            return true;
+        }
+        String normalizedMimeType = mimeType.trim().toLowerCase(Locale.US);
+        return (
+            normalizedMimeType.equals("application/octet-stream") ||
+            normalizedMimeType.equals("binary/octet-stream") ||
+            normalizedMimeType.equals("application/download") ||
+            normalizedMimeType.equals("application/x-download") ||
+            normalizedMimeType.equals("application/binary") ||
+            normalizedMimeType.equals("application/x-binary")
+        );
+    }
+
+    private static boolean shouldDeferConstructorMimeTypeToContentTypeHeader(String contentTypeHeader) {
+        String mimeType = extractMimeType(contentTypeHeader);
+        if (mimeType == null) {
+            return false;
+        }
+        return mimeType.toLowerCase(Locale.US).startsWith("multipart/");
+    }
+
     static ParsedResponseHeaders splitResponseHeaders(Map<String, List<String>> rawHeaders) {
         Map<String, String> responseHeaders = new HashMap<>();
         List<String> cookieHeaders = new java.util.ArrayList<>();
@@ -831,6 +1003,9 @@ final class ProxyRequestSupport {
             return false;
         }
         String normalizedMimeType = mimeType.trim().toLowerCase(Locale.US);
+        if (normalizedMimeType.startsWith("image/")) {
+            return false;
+        }
         return (
             normalizedMimeType.startsWith("text/") ||
             normalizedMimeType.equals("application/json") ||

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/WebViewDialog.java

@@ -334,12 +334,13 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
     private boolean datePickerInjected = false; // Track if we've injected date picker fixes
     private final WebView capacitorWebView;
     private String instanceId = "";
-    private final Map<String, ProxiedRequest> proxiedRequestsHashmap = new HashMap<>();
+    private final Map<String, ProxiedRequest> proxiedRequestsHashmap = new ConcurrentHashMap<>();
     private ProxyBridge proxyBridge;
     private String proxyBridgeScript;
     private String proxyAccessToken;
     private final ExecutorService executorService = Executors.newCachedThreadPool();
     private final Handler mainHandler = new Handler(Looper.getMainLooper());
+    private final AtomicBoolean cookieFlushScheduled = new AtomicBoolean(false);
     private final Map<String, BlobDownloadSession> blobDownloadSessions = new ConcurrentHashMap<>();
     private final Map<String, ClientCertificateIdentity> clientCertificateIdentities = new ConcurrentHashMap<>();
     private int iconColor = Color.BLACK; // Default icon color
@@ -4906,7 +4907,9 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                         }
                         String initiatorUrl = request.getRequestHeaders().get("Referer");
                         if (initiatorUrl == null || initiatorUrl.isBlank()) {
-                            initiatorUrl = getWebViewUrlOnMainThread(originalUrl);
+                            initiatorUrl = getWebViewUrlOrFallback(
+                                _options != null && _options.getUrl() != null ? _options.getUrl() : originalUrl
+                            );
                         }
                         String targetCookies = CookieManager.getInstance().getCookie(originalUrl);
                         if (
@@ -5027,7 +5030,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                             nativeResponse = performNativeRequest(requestContext);
                         } catch (IOException error) {
                             Log.e("InAppBrowserProxy", "Native request failed for: " + requestContext.url, error);
-                            return bridgeBackedRequest ? createNativeFailureResponse(requestContext.url, error) : null;
+                            return createProxiedNativeFailureResponse(requestContext.url, bridgeBackedRequest, error);
                         }
                     }
 
@@ -5040,7 +5043,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                                 redirectReplay = followRedirectForWebView(requestContext, nativeResponse, redirectsFollowed);
                             } catch (IOException error) {
                                 Log.e("InAppBrowserProxy", "Native redirect replay failed for: " + requestContext.url, error);
-                                return bridgeBackedRequest ? createNativeFailureResponse(requestContext.url, error) : null;
+                                return createProxiedNativeFailureResponse(requestContext.url, bridgeBackedRequest, error);
                             }
                             if (redirectReplay != null) {
                                 requestContext = redirectReplay.requestContext;
@@ -5103,7 +5106,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                             redirectReplay = followRedirectForWebView(requestContext, nativeResponse, redirectsFollowed);
                         } catch (IOException error) {
                             Log.e("InAppBrowserProxy", "Native redirect replay failed for: " + requestContext.url, error);
-                            return bridgeBackedRequest ? createNativeFailureResponse(requestContext.url, error) : null;
+                            return createProxiedNativeFailureResponse(requestContext.url, bridgeBackedRequest, error);
                         }
                         if (redirectReplay != null) {
                             requestContext = redirectReplay.requestContext;
@@ -5283,8 +5286,13 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                     if (view == null || _webView == null) {
                         return;
                     }
-                    _options.getCallbacks().pageLoadError();
-                    if (request != null && request.isForMainFrame() && !isInitialized) {
+                    if (request == null || !request.isForMainFrame()) {
+                        return;
+                    }
+                    if (_options.getCallbacks() != null) {
+                        _options.getCallbacks().pageLoadError();
+                    }
+                    if (!isInitialized) {
                         CharSequence description = error != null ? error.getDescription() : null;
                         String message = description != null ? "Initial page load failed: " + description : "Initial page load failed";
                         rejectOpenWebViewIfNeeded(message);
@@ -5538,9 +5546,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         shutdownExecutorServiceAsync();
 
         // Clear any remaining proxied requests
-        synchronized (proxiedRequestsHashmap) {
-            proxiedRequestsHashmap.clear();
-        }
+        proxiedRequestsHashmap.clear();
 
         try {
             super.dismiss();
@@ -5768,10 +5774,29 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
     }
 
     private boolean shouldBootstrapInitialLegacyProxyLoad() {
-        if (_options == null || _options.isPopupWindowMode()) {
-            return false;
+        return ProxyRequestSupport.shouldBootstrapInitialProxyLoad(_options);
+    }
+
+    private void loadInitialUrlDirect(Map<String, String> requestHeaders, String httpMethod, String httpBody) {
+        if (_webView == null || _options == null) {
+            return;
+        }
+
+        Map<String, String> headers = requestHeaders != null ? requestHeaders : new HashMap<>();
+        if (supportsRequestBody(httpMethod) && httpBody != null) {
+            byte[] postData = httpBody.getBytes(StandardCharsets.UTF_8);
+            _webView.postUrl(_options.getUrl(), postData);
+            if (!headers.isEmpty()) {
+                Log.w(
+                    "InAppBrowser",
+                    "Custom headers were provided but may not be sent with POST request. " +
+                        "Android WebView's postUrl method has limited header support."
+                );
+            }
+            return;
         }
-        return ProxyRequestSupport.shouldDelegateLegacyJsProxyRequest(_options, _options.getUrl());
+
+        _webView.loadUrl(_options.getUrl(), headers);
     }
 
     private void loadInitialLegacyProxyContent(Map<String, String> requestHeaders, String httpMethod, String httpBody) {
@@ -5802,7 +5827,10 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
 
                 NativeResponseData responseData = proxyResult.responseData;
                 if (responseData == null || !canBootstrapHtmlResponse(responseData.contentType)) {
-                    rejectOpenWebViewIfNeeded("Initial legacy proxy request did not return bootstrap HTML");
+                    if (_webView == null) {
+                        return;
+                    }
+                    _webView.post(() -> loadInitialUrlDirect(initialHeaders, initialMethod, httpBody));
                     return;
                 }
 
@@ -5826,7 +5854,19 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                 });
             } catch (IOException error) {
                 Log.e("InAppBrowserProxy", "Initial legacy proxy bootstrap failed for: " + initialUrl, error);
-                rejectOpenWebViewIfNeeded("Initial legacy proxy bootstrap failed: " + error.getMessage());
+                if (_webView == null) {
+                    return;
+                }
+                String failureBody = new String(
+                    ProxyRequestSupport.createNativeRequestFailureBody(initialUrl, error),
+                    StandardCharsets.UTF_8
+                );
+                _webView.post(() -> {
+                    if (_webView == null) {
+                        return;
+                    }
+                    _webView.loadDataWithBaseURL(initialUrl, failureBody, "text/plain", "utf-8", initialUrl);
+                });
             }
         });
     }
@@ -5973,6 +6013,13 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         return response;
     }
 
+    private WebResourceResponse createProxiedNativeFailureResponse(String requestUrl, boolean bridgeBackedRequest, IOException error) {
+        if (!ProxyRequestSupport.shouldReturnSyntheticNativeFailure(bridgeBackedRequest, _options, requestUrl)) {
+            return null;
+        }
+        return createNativeFailureResponse(requestUrl, error);
+    }
+
     private WebResourceResponse createNativeFailureResponse(String requestUrl, IOException error) {
         NativeResponseData responseData = new NativeResponseData(
             ProxyRequestSupport.SYNTHETIC_NATIVE_FAILURE_STATUS,
@@ -6135,7 +6182,13 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                 contentType = conn.getContentType();
             }
 
-            return new NativeResponseData(status, contentType, responseHeaders, bodyBytes);
+            ProxyRequestSupport.ProxiedResponseMetadata normalizedResponse = ProxyRequestSupport.normalizeProxiedResponseMetadata(
+                contentType,
+                responseHeaders,
+                requestContext.url
+            );
+
+            return new NativeResponseData(status, normalizedResponse.contentType(), normalizedResponse.headers(), bodyBytes);
         } finally {
             conn.disconnect();
         }
@@ -6155,15 +6208,22 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             wroteCookie = true;
         }
         if (wroteCookie) {
-            cookieManager.flush();
+            scheduleCookieFlush();
         }
     }
 
-    public void handleProxyResponse(String requestId, JSObject response) {
-        ProxiedRequest proxiedRequest;
-        synchronized (proxiedRequestsHashmap) {
-            proxiedRequest = proxiedRequestsHashmap.get(requestId);
+    private void scheduleCookieFlush() {
+        if (!cookieFlushScheduled.compareAndSet(false, true)) {
+            return;
         }
+        mainHandler.post(() -> {
+            cookieFlushScheduled.set(false);
+            CookieManager.getInstance().flush();
+        });
+    }
+
+    public void handleProxyResponse(String requestId, JSObject response) {
+        ProxiedRequest proxiedRequest = proxiedRequestsHashmap.get(requestId);
         if (proxiedRequest == null) {
             Log.e("InAppBrowserProxy", "No pending request for id: " + requestId);
             return;
@@ -6175,9 +6235,7 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         }
 
         if (response == null) {
-            synchronized (proxiedRequestsHashmap) {
-                proxiedRequestsHashmap.remove(requestId);
-            }
+            proxiedRequestsHashmap.remove(requestId);
             proxiedRequest.semaphore.release();
             return;
         }
@@ -6261,14 +6319,21 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                     if (contentType == null) {
                         contentType = responseHeaders.get("Content-Type");
                     }
-                    if (contentType == null) {
-                        contentType = "application/octet-stream";
-                    }
+                    ProxyRequestSupport.ProxiedResponseMetadata normalizedResponse = ProxyRequestSupport.normalizeProxiedResponseMetadata(
+                        contentType,
+                        responseHeaders,
+                        proxiedRequest.requestContext != null ? proxiedRequest.requestContext.url : null
+                    );
 
                     if (status < 100 || status > 599) {
                         status = 200;
                     }
-                    proxiedRequest.nativeResponse = new NativeResponseData(status, contentType, responseHeaders, bodyBytes);
+                    proxiedRequest.nativeResponse = new NativeResponseData(
+                        status,
+                        normalizedResponse.contentType(),
+                        normalizedResponse.headers(),
+                        bodyBytes
+                    );
                     proxiedRequest.response = buildWebResourceResponse(proxiedRequest.nativeResponse);
                 }
             } catch (IOException invalidBodyError) {
@@ -6279,17 +6344,13 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             }
         }
 
-        synchronized (proxiedRequestsHashmap) {
-            proxiedRequestsHashmap.remove(requestId);
-        }
+        proxiedRequestsHashmap.remove(requestId);
         proxiedRequest.semaphore.release();
     }
 
     @Override
     public boolean hasPendingProxyRequest(String requestId) {
-        synchronized (proxiedRequestsHashmap) {
-            return proxiedRequestsHashmap.containsKey(requestId);
-        }
+        return proxiedRequestsHashmap.containsKey(requestId);
     }
 
     private void shareUrl() {

package/ios/Sources/InAppBrowserPlugin/InAppBrowserPlugin.swift

@@ -98,7 +98,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
         case aware = "AWARE"
         case fakeVisible = "FAKE_VISIBLE"
     }
-    private let pluginVersion: String = "8.7.5"
+    private let pluginVersion: String = "8.7.7"
     public let identifier = "CapgoInAppBrowserPlugin"
     public let jsName = "CapgoInAppBrowser"
     public let pluginMethods: [CAPPluginMethod] = [
@@ -2129,7 +2129,9 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
             responseDict = dict
         }
 
-        proxyHandler.handleResponse(requestId: requestId, phase: phase, responseData: responseDict)
+        DispatchQueue.global(qos: .userInitiated).async { [proxyHandler] in
+            proxyHandler.handleResponse(requestId: requestId, phase: phase, responseData: responseDict)
+        }
         call.resolve()
     }
 

package/ios/Sources/InAppBrowserPlugin/ProxyBridge.swift

@@ -51,11 +51,8 @@ public final class ProxyBridge {
     func getAndRemove(requestId: String) -> ProxyBridgeStoredRequest? {
         lock.lock()
         defer { lock.unlock() }
-        guard let storedRequest = storedRequests.removeValue(forKey: requestId) else {
-            return nil
-        }
-        storedRequestOrder.removeAll { $0 == requestId }
-        return storedRequest
+        // Avoid O(n) queue scans on every parallel bridge request; stale ids are purged lazily.
+        return storedRequests.removeValue(forKey: requestId)
     }
 
     private func cleanupExpiredRequests(now: Date) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capgo/capacitor-inappbrowser",
-  "version": "8.7.5",
+  "version": "8.7.7",
   "description": "Capacitor plugin in app browser",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",