@capgo/capacitor-inappbrowser 8.7.7 → 8.7.9

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/CustomSchemeInterceptSupport.java

@@ -7,7 +7,9 @@ import java.util.Set;
 
 final class CustomSchemeInterceptSupport {
 
-    private static final Set<String> EXCLUDED_SCHEMES = new HashSet<>(Arrays.asList("http", "https", "file", "tel", "mailto", "sms"));
+    private static final Set<String> EXCLUDED_SCHEMES = new HashSet<>(
+        Arrays.asList("http", "https", "file", "data", "tel", "mailto", "sms")
+    );
 
     private CustomSchemeInterceptSupport() {}
 

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/HtmlDataUrlSupport.java

@@ -0,0 +1,49 @@
+package ee.forgr.capacitor_inappbrowser;
+
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+import java.util.Locale;
+
+final class HtmlDataUrlSupport {
+
+    private static final String MIME_PREFIX = "data:text/html";
+    private static final String BASE64_MARKER = ";base64,";
+
+    private HtmlDataUrlSupport() {}
+
+    static boolean isHtmlBase64DataUrl(String url) {
+        return parseHtml(url) != null;
+    }
+
+    static boolean isDataUrl(String url) {
+        return url != null && url.toLowerCase(Locale.ROOT).startsWith("data:");
+    }
+
+    static String parseHtml(String url) {
+        if (url == null || url.isEmpty()) {
+            return null;
+        }
+
+        String lower = url.toLowerCase(Locale.ROOT);
+        if (!lower.startsWith(MIME_PREFIX)) {
+            return null;
+        }
+
+        int base64Marker = lower.indexOf(BASE64_MARKER);
+        if (base64Marker < 0) {
+            return null;
+        }
+
+        String payload = url.substring(base64Marker + BASE64_MARKER.length());
+        if (payload.isEmpty()) {
+            return null;
+        }
+
+        try {
+            byte[] decoded = Base64.getDecoder().decode(payload);
+            return new String(decoded, StandardCharsets.UTF_8);
+        } catch (IllegalArgumentException ignored) {
+            return null;
+        }
+    }
+}

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/ProxyRequestSupport.java

@@ -62,7 +62,7 @@ final class ProxyRequestSupport {
     private ProxyRequestSupport() {}
 
     static boolean shouldInjectBridge(Options options) {
-        return options != null && usesLegacyJsProxyMode(options);
+        return usesLegacyJsProxyMode(options);
     }
 
     static boolean usesLegacyJsProxyMode(Options options) {
@@ -120,6 +120,9 @@ final class ProxyRequestSupport {
         if (initialUrl == null || initialUrl.isBlank()) {
             return false;
         }
+        if (HtmlDataUrlSupport.isDataUrl(initialUrl)) {
+            return false;
+        }
         if (!options.shouldEnableNativeProxy()) {
             return false;
         }

package/android/src/main/java/ee/forgr/capacitor_inappbrowser/WebViewDialog.java

@@ -2718,7 +2718,9 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         String httpBody = _options.getHttpBody();
 
         if (!_options.isPopupWindowMode()) {
-            if (shouldBootstrapInitialLegacyProxyLoad()) {
+            if (loadHtmlDataUrlIfNeeded(this._options.getUrl())) {
+                // Inline HTML loaded from data:text/html;base64 URL.
+            } else if (shouldBootstrapInitialLegacyProxyLoad()) {
                 loadInitialLegacyProxyContent(requestHeaders, httpMethod, httpBody);
             } else if (supportsRequestBody(httpMethod) && httpBody != null) {
                 // For POST/PUT/PATCH requests with body
@@ -3832,6 +3834,10 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
         }
 
         try {
+            if (loadHtmlDataUrlIfNeeded(url)) {
+                return;
+            }
+
             Map<String, String> requestHeaders = new HashMap<>();
             if (_options.getHeaders() != null) {
                 Iterator<String> keys = _options.getHeaders().keys();
@@ -4663,6 +4669,10 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
                     String url = request.getUrl().toString();
                     Log.d("InAppBrowser", "shouldOverrideUrlLoading: " + url);
 
+                    if (HtmlDataUrlSupport.isDataUrl(url)) {
+                        return false;
+                    }
+
                     boolean isNotHttpOrHttps = !url.startsWith("https://") && !url.startsWith("http://");
 
                     // If preventDeeplink is true, don't handle any non-http(s) URLs
@@ -5769,6 +5779,20 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             .replace("___CAPGO_PROXY_REGEX___", escapeJavaScriptLiteral(proxyRegexSource));
     }
 
+    private boolean loadHtmlDataUrlIfNeeded(String url) {
+        if (_webView == null) {
+            return false;
+        }
+
+        String html = HtmlDataUrlSupport.parseHtml(url);
+        if (html == null) {
+            return false;
+        }
+
+        _webView.loadDataWithBaseURL("about:blank", html, "text/html", "utf-8", null);
+        return true;
+    }
+
     private boolean shouldUseNativeProxy() {
         return _options != null && _options.shouldEnableNativeProxy();
     }
@@ -5782,6 +5806,10 @@ public class WebViewDialog extends Dialog implements ProxyResponseRouting.ProxyR
             return;
         }
 
+        if (loadHtmlDataUrlIfNeeded(_options.getUrl())) {
+            return;
+        }
+
         Map<String, String> headers = requestHeaders != null ? requestHeaders : new HashMap<>();
         if (supportsRequestBody(httpMethod) && httpBody != null) {
             byte[] postData = httpBody.getBytes(StandardCharsets.UTF_8);

package/ios/Sources/InAppBrowserPlugin/HtmlDataUrlSupport.swift

@@ -0,0 +1,36 @@
+import Foundation
+
+enum HtmlDataUrlSupport {
+    private static let mimePrefix = "data:text/html"
+    private static let base64Marker = ";base64,"
+
+    static func isHtmlBase64DataUrl(_ urlString: String) -> Bool {
+        parseHtml(from: urlString) != nil
+    }
+
+    static func isDataUrl(_ urlString: String) -> Bool {
+        urlString.lowercased().hasPrefix("data:")
+    }
+
+    static func parseHtml(from urlString: String) -> String? {
+        let lowercased = urlString.lowercased()
+        guard lowercased.hasPrefix(mimePrefix) else {
+            return nil
+        }
+
+        guard let base64Range = lowercased.range(of: base64Marker) else {
+            return nil
+        }
+
+        let payloadStart = urlString.index(
+            urlString.startIndex,
+            offsetBy: lowercased.distance(from: lowercased.startIndex, to: base64Range.upperBound)
+        )
+        let payload = String(urlString[payloadStart...])
+        guard !payload.isEmpty, let data = Data(base64Encoded: payload) else {
+            return nil
+        }
+
+        return String(data: data, encoding: .utf8)
+    }
+}

package/ios/Sources/InAppBrowserPlugin/InAppBrowserPlugin.swift

@@ -98,7 +98,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
         case aware = "AWARE"
         case fakeVisible = "FAKE_VISIBLE"
     }
-    private let pluginVersion: String = "8.7.7"
+    private let pluginVersion: String = "8.7.9"
     public let identifier = "CapgoInAppBrowserPlugin"
     public let jsName = "CapgoInAppBrowser"
     public let pluginMethods: [CAPPluginMethod] = [
@@ -832,6 +832,17 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
 
     }
 
+    private func webSource(for urlString: String) -> WKWebSource? {
+        if let html = HtmlDataUrlSupport.parseHtml(from: urlString) {
+            return .string(html, base: nil)
+        }
+
+        guard let url = URL(string: urlString) else {
+            return nil
+        }
+
+        return .remote(url)
+    }
     @objc func openWebView(_ call: CAPPluginCall) {
         if !self.isSetupDone {
             self.setup()
@@ -1087,7 +1098,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
         }
 
         DispatchQueue.main.async {
-            guard let url = URL(string: urlString) else {
+            guard let webSource = self.webSource(for: urlString) else {
                 call.reject("Invalid URL format")
                 return
             }
@@ -1116,7 +1127,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
             webViewController.blankNavigationTab = toolbarType == "blank"
             webViewController.enabledSafeBottomMargin = enabledSafeBottomMargin
             webViewController.enabledSafeTopMargin = enabledSafeTopMargin
-            webViewController.source = .remote(url)
+            webViewController.source = webSource
             webViewController.setCredentials(credentials: credentials)
             webViewController.allowWebViewJsVisibilityControl = allowWebViewJsVisibilityControl
             webViewController.allowScreenshotsFromWebPage = allowScreenshotsFromWebPage
@@ -1185,7 +1196,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
                 }
             }
 
-            webViewController.source = .remote(url)
+            webViewController.source = webSource
             webViewController.leftNavigationBarItemTypes = []
 
             // Configure close button based on showArrow
@@ -1505,17 +1516,25 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
             return
         }
 
-        guard let url = URL(string: urlString) else {
-            call.reject("Invalid URL")
-            return
-        }
-
         let targetId = call.getString("id")
         guard let webViewController = self.resolveWebViewController(for: targetId) else {
             call.reject("WebView is not initialized")
             return
         }
 
+        if let html = HtmlDataUrlSupport.parseHtml(from: urlString) {
+            webViewController.source = .string(html, base: nil)
+            webViewController.load(string: html, base: nil)
+            call.resolve()
+            return
+        }
+
+        guard let url = URL(string: urlString) else {
+            call.reject("Invalid URL")
+            return
+        }
+
+        webViewController.source = .remote(url)
         webViewController.load(remote: url)
         call.resolve()
     }
@@ -1985,12 +2004,14 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
         let credentials = self.readCredentials(call)
 
         DispatchQueue.main.async {
-            guard let url = URL(string: urlString) else {
+            guard let webSource = self.webSource(for: urlString) else {
                 call.reject("Invalid URL format")
                 return
             }
 
-            self.webViewController = WKWebViewController.init(url: url, headers: headers, isInspectable: isInspectable, credentials: credentials, preventDeeplink: preventDeeplink, blankNavigationTab: true, enabledSafeBottomMargin: false, enabledSafeTopMargin: true)
+            let initialUrl = webSource.remoteURL ?? URL(string: "about:blank")!
+
+            self.webViewController = WKWebViewController.init(url: initialUrl, headers: headers, isInspectable: isInspectable, credentials: credentials, preventDeeplink: preventDeeplink, blankNavigationTab: true, enabledSafeBottomMargin: false, enabledSafeTopMargin: true)
 
             guard let webViewController = self.webViewController else {
                 call.reject("Failed to initialize WebViewController")
@@ -2007,7 +2028,7 @@ public class CapgoInAppBrowserPlugin: CAPPlugin, CAPBridgedPlugin {
                 }
             }
 
-            webViewController.source = .remote(url)
+            webViewController.source = webSource
             webViewController.leftNavigationBarItemTypes = [.back, .forward, .reload]
             webViewController.capBrowserPlugin = self
             webViewController.hasDynamicTitle = true

package/ios/Sources/InAppBrowserPlugin/WKWebViewController.swift

@@ -16,7 +16,7 @@ private let cookieKey = "Cookie"
 
 enum CustomSchemeInterceptSupport {
     static let standardHandledSchemes = ["tel", "mailto", "sms"]
-    private static let webSchemes = ["http", "https", "file"]
+    private static let webSchemes = ["http", "https", "file", "data"]
 
     static func shouldEmitInterceptEvent(for url: URL) -> Bool {
         guard let scheme = url.scheme?.lowercased(), !scheme.isEmpty else {
@@ -42,6 +42,20 @@ private enum DownloadReservationStore {
     static let lock = NSLock()
 }
 
+private enum BlobDownloadSupport {
+    static let maxLegacyBytes = 512 * 1024
+    static let chunkBytes = 64 * 1024
+}
+
+private struct BlobDownloadSession {
+    let destinationURL: URL
+    let sourceURL: String?
+    let mimeType: String?
+    let fileHandle: FileHandle
+    let expectedSize: Int64?
+    var bytesWritten: Int64 = 0
+}
+
 public struct WKWebViewCredentials {
     var username: String
     var password: String
@@ -456,6 +470,7 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
 
     private var lastInjectedSafeAreaInsets: InjectedSafeAreaInsets?
     private var downloadStates: [ObjectIdentifier: WKDownloadState] = [:]
+    private var blobDownloadSessions: [String: BlobDownloadSession] = [:]
     private var previewItemURL: URL?
 
     func setHeaders(headers: [String: String]) {
@@ -496,7 +511,22 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
             return nil
         }
 
-        return httpResponse.value(forHTTPHeaderField: "Content-Disposition")
+        if let value = httpResponse.value(forHTTPHeaderField: "Content-Disposition"),
+           !value.trimmingCharacters(in: .whitespacesAndNewlines).isEmpty {
+            return value
+        }
+
+        for (key, value) in httpResponse.allHeaderFields {
+            guard let headerName = key as? String,
+                  headerName.lowercased() == "content-disposition",
+                  let headerValue = value as? String,
+                  !headerValue.trimmingCharacters(in: .whitespacesAndNewlines).isEmpty else {
+                continue
+            }
+            return headerValue
+        }
+
+        return nil
     }
 
     private func attachmentDispositionType(_ response: URLResponse) -> String? {
@@ -703,6 +733,329 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
         }
     }
 
+
+    private func parseBlobBridgePayload(_ payload: Any) -> [String: Any]? {
+        if let dictionary = payload as? [String: Any] {
+            return dictionary
+        }
+
+        if let jsonString = payload as? String,
+           let data = jsonString.data(using: .utf8),
+           let dictionary = try? JSONSerialization.jsonObject(with: data) as? [String: Any] {
+            return dictionary
+        }
+
+        return nil
+    }
+
+    private func blobDownloadFileName(from payload: [String: Any], fallback: String = "download") -> String {
+        sanitizeDownloadFilename(payload["fileName"] as? String ?? fallback)
+    }
+
+    private func cleanupBlobDownloadSession(_ session: BlobDownloadSession?, deleteFile: Bool) {
+        guard let session else {
+            return
+        }
+
+        try? session.fileHandle.close()
+        if deleteFile {
+            try? FileManager.default.removeItem(at: session.destinationURL)
+            releaseDownloadDestination(session.destinationURL)
+        }
+    }
+
+    private func abortBlobDownloadSession(sessionId: String, deleteFile: Bool) -> BlobDownloadSession? {
+        guard let session = blobDownloadSessions.removeValue(forKey: sessionId) else {
+            return nil
+        }
+        cleanupBlobDownloadSession(session, deleteFile: deleteFile)
+        return session
+    }
+
+    private func handleLegacyBlobDownloadPayload(_ payload: Any) {
+        guard handleDownloads else {
+            return
+        }
+
+        guard let jsonPayload = parseBlobBridgePayload(payload) else {
+            emitDownloadFailed(sourceURL: nil, error: "Blob download payload is missing")
+            return
+        }
+
+        let base64 = jsonPayload["base64"] as? String ?? ""
+        guard !base64.isEmpty else {
+            emitDownloadFailed(sourceURL: jsonPayload["sourceUrl"] as? String, error: "Blob download payload is empty")
+            return
+        }
+
+        let declaredSize = (jsonPayload["size"] as? NSNumber)?.int64Value
+        let estimatedSize = Int64((Double(base64.count) * 3.0 / 4.0).rounded(.up))
+        let decodedSize = max(declaredSize ?? estimatedSize, estimatedSize)
+        if decodedSize > Int64(BlobDownloadSupport.maxLegacyBytes) {
+            emitDownloadFailed(
+                sourceURL: jsonPayload["sourceUrl"] as? String,
+                fileName: blobDownloadFileName(from: jsonPayload),
+                mimeType: jsonPayload["mimeType"] as? String,
+                error: "Blob download is too large for the legacy bridge"
+            )
+            return
+        }
+
+        do {
+            guard let data = Data(base64Encoded: base64) else {
+                throw NSError(domain: "InAppBrowser", code: 1, userInfo: [NSLocalizedDescriptionKey: "Blob download payload is invalid"])
+            }
+
+            let fileName = blobDownloadFileName(from: jsonPayload)
+            let destinationURL = try uniqueDownloadDestination(for: fileName)
+            try data.write(to: destinationURL, options: .atomic)
+            let mimeType = jsonPayload["mimeType"] as? String
+            let sourceURL = jsonPayload["sourceUrl"] as? String
+            previewDownloadedFile(destinationURL, mimeType: mimeType, sourceURL: sourceURL)
+        } catch {
+            emitDownloadFailed(
+                sourceURL: jsonPayload["sourceUrl"] as? String,
+                fileName: blobDownloadFileName(from: jsonPayload),
+                mimeType: jsonPayload["mimeType"] as? String,
+                error: "Failed to save blob download: \(error.localizedDescription)"
+            )
+        }
+    }
+
+    private func startBlobDownloadPayload(_ payload: Any) {
+        guard handleDownloads else {
+            return
+        }
+
+        do {
+            guard let jsonPayload = parseBlobBridgePayload(payload) else {
+                throw NSError(domain: "InAppBrowser", code: 1, userInfo: [NSLocalizedDescriptionKey: "Blob download start payload is missing"])
+            }
+
+            let sessionId = jsonPayload["sessionId"] as? String ?? ""
+            guard !sessionId.isEmpty else {
+                throw NSError(domain: "InAppBrowser", code: 1, userInfo: [NSLocalizedDescriptionKey: "Blob download session id is missing"])
+            }
+
+            if blobDownloadSessions[sessionId] != nil {
+                throw NSError(domain: "InAppBrowser", code: 1, userInfo: [NSLocalizedDescriptionKey: "Blob download session already exists"])
+            }
+
+            let fileName = blobDownloadFileName(from: jsonPayload)
+            let destinationURL = try uniqueDownloadDestination(for: fileName)
+            let fileHandle = try FileHandle(forWritingTo: destinationURL)
+            let expectedSize = (jsonPayload["size"] as? NSNumber)?.int64Value
+            blobDownloadSessions[sessionId] = BlobDownloadSession(
+                destinationURL: destinationURL,
+                sourceURL: jsonPayload["sourceUrl"] as? String,
+                mimeType: jsonPayload["mimeType"] as? String,
+                fileHandle: fileHandle,
+                expectedSize: expectedSize
+            )
+        } catch {
+            emitDownloadFailed(sourceURL: nil, error: "Failed to start blob download: \(error.localizedDescription)")
+        }
+    }
+
+    private func appendBlobDownloadChunkPayload(_ payload: Any) {
+        guard handleDownloads else {
+            return
+        }
+
+        guard let jsonPayload = parseBlobBridgePayload(payload),
+              let sessionId = jsonPayload["sessionId"] as? String,
+              !sessionId.isEmpty,
+              var session = blobDownloadSessions[sessionId] else {
+            return
+        }
+
+        let base64 = jsonPayload["base64"] as? String ?? ""
+        guard !base64.isEmpty, let data = Data(base64Encoded: base64) else {
+            abortBlobDownloadSession(sessionId: sessionId, deleteFile: true)
+            emitDownloadFailed(sourceURL: session.sourceURL, error: "Failed to save blob download")
+            return
+        }
+
+        do {
+            if let expectedSize = session.expectedSize, session.bytesWritten + Int64(data.count) > expectedSize {
+                throw NSError(domain: "InAppBrowser", code: 1, userInfo: [NSLocalizedDescriptionKey: "Blob download exceeded expected size"])
+            }
+
+            try session.fileHandle.write(contentsOf: data)
+            session.bytesWritten += Int64(data.count)
+            blobDownloadSessions[sessionId] = session
+        } catch {
+            abortBlobDownloadSession(sessionId: sessionId, deleteFile: true)
+            emitDownloadFailed(sourceURL: session.sourceURL, error: "Failed to save blob download: \(error.localizedDescription)")
+        }
+    }
+
+    private func finishBlobDownloadPayload(_ payload: Any) {
+        guard handleDownloads else {
+            return
+        }
+
+        guard let jsonPayload = parseBlobBridgePayload(payload),
+              let sessionId = jsonPayload["sessionId"] as? String,
+              !sessionId.isEmpty,
+              let session = blobDownloadSessions.removeValue(forKey: sessionId) else {
+            emitDownloadFailed(sourceURL: nil, error: "Blob download session was not initialized")
+            return
+        }
+
+        defer {
+            try? session.fileHandle.close()
+        }
+
+        if let expectedSize = session.expectedSize, session.bytesWritten != expectedSize {
+            cleanupBlobDownloadSession(session, deleteFile: true)
+            emitDownloadFailed(
+                sourceURL: session.sourceURL,
+                fileName: session.destinationURL.lastPathComponent,
+                mimeType: session.mimeType,
+                error: "Blob download size mismatch"
+            )
+            return
+        }
+
+        previewDownloadedFile(session.destinationURL, mimeType: session.mimeType, sourceURL: session.sourceURL)
+    }
+
+    private func abortBlobDownloadPayload(_ payload: Any) {
+        guard handleDownloads else {
+            return
+        }
+
+        let jsonPayload = parseBlobBridgePayload(payload)
+        let sessionId = jsonPayload?["sessionId"] as? String ?? ""
+        let session = abortBlobDownloadSession(sessionId: sessionId, deleteFile: true)
+        let reason = jsonPayload?["reason"] as? String ?? "Blob download aborted"
+        emitDownloadFailed(
+            sourceURL: session?.sourceURL ?? jsonPayload?["sourceUrl"] as? String,
+            fileName: session?.destinationURL.lastPathComponent ?? jsonPayload?["fileName"] as? String,
+            mimeType: session?.mimeType ?? jsonPayload?["mimeType"] as? String,
+            error: reason
+        )
+    }
+
+    private func handleBlobDownloadFromPage(blobUrl: String, mimeType: String?, contentDisposition: String?) {
+        guard handleDownloads, let webView else {
+            emitDownloadFailed(sourceURL: blobUrl, error: "Blob download requires an active WebView")
+            return
+        }
+
+        let fallbackMimeType = normalizedMimeType(mimeType, fileURL: URL(fileURLWithPath: "download")) ?? "application/octet-stream"
+        let fallbackFileName = sanitizeDownloadFilename(
+            contentDisposition?.components(separatedBy: "filename=").last?
+                .trimmingCharacters(in: CharacterSet(charactersIn: "\"' "))
+                ?? "download"
+        )
+
+        let params: [String: Any] = [
+            "blobUrl": blobUrl,
+            "fallbackMimeType": fallbackMimeType,
+            "fallbackFileName": fallbackFileName,
+            "legacyMaxBytes": BlobDownloadSupport.maxLegacyBytes,
+            "chunkSize": BlobDownloadSupport.chunkBytes
+        ]
+
+        guard JSONSerialization.isValidJSONObject(params),
+              let paramsData = try? JSONSerialization.data(withJSONObject: params),
+              let paramsJson = String(data: paramsData, encoding: .utf8) else {
+            emitDownloadFailed(sourceURL: blobUrl, error: "Failed to prepare blob download script")
+            return
+        }
+
+        let script = """
+        (function(params) {
+          const blobUrl = params.blobUrl;
+          const fallbackMimeType = params.fallbackMimeType;
+          const fallbackFileName = params.fallbackFileName;
+          const legacyMaxBytes = params.legacyMaxBytes;
+          const chunkSize = params.chunkSize;
+          const matchingLink = Array.from(document.querySelectorAll('a[download]')).find(function(link) { return link.href === blobUrl; });
+          const bridge = (window.mobileApp && window.mobileApp.startBlobDownload && window.mobileApp.appendBlobDownloadChunk && window.mobileApp.finishBlobDownload)
+            ? window.mobileApp
+            : (window.mobileApp && window.mobileApp.handleBlobDownload)
+              ? window.mobileApp
+              : null;
+          const sessionId = 'blob-download-' + Date.now() + '-' + Math.random().toString(36).slice(2);
+          let fileName = fallbackFileName;
+          const readChunkAsBase64 = function(chunk) {
+            return new Promise(function(resolve, reject) {
+              const reader = new FileReader();
+              reader.onloadend = function() {
+                const dataUrl = reader.result || '';
+                resolve(String(dataUrl).split(',').pop() || '');
+              };
+              reader.onerror = function() {
+                reject(reader.error || new Error('Failed to read blob chunk'));
+              };
+              reader.readAsDataURL(chunk);
+            });
+          };
+
+          return (async function() {
+            if (!bridge) {
+              throw new Error('Blob download bridge is not available');
+            }
+
+            const response = await fetch(blobUrl);
+            const blob = await response.blob();
+            fileName = (matchingLink && matchingLink.getAttribute('download')) || fallbackFileName;
+
+            if (bridge.startBlobDownload && bridge.appendBlobDownloadChunk && bridge.finishBlobDownload) {
+              bridge.startBlobDownload(JSON.stringify({
+                sessionId: sessionId,
+                fileName: fileName,
+                sourceUrl: blobUrl,
+                mimeType: blob.type || fallbackMimeType,
+                size: blob.size
+              }));
+              for (let offset = 0; offset < blob.size; offset += chunkSize) {
+                const base64 = await readChunkAsBase64(blob.slice(offset, offset + chunkSize));
+                bridge.appendBlobDownloadChunk(JSON.stringify({ sessionId: sessionId, base64: base64 }));
+              }
+              bridge.finishBlobDownload(JSON.stringify({ sessionId: sessionId }));
+              return;
+            }
+
+            if (blob.size > legacyMaxBytes) {
+              throw new Error('Blob download is too large for the legacy bridge');
+            }
+
+            const base64 = await readChunkAsBase64(blob);
+            bridge.handleBlobDownload(JSON.stringify({
+              fileName: fileName,
+              sourceUrl: blobUrl,
+              mimeType: blob.type || fallbackMimeType,
+              size: blob.size,
+              base64: base64
+            }));
+          })().catch(function(error) {
+            if (bridge && bridge.abortBlobDownload) {
+              bridge.abortBlobDownload(JSON.stringify({
+                sessionId: sessionId,
+                fileName: fileName,
+                sourceUrl: blobUrl,
+                mimeType: fallbackMimeType,
+                reason: String((error && error.message) || error || 'Blob download failed')
+              }));
+            }
+            console.error('Failed to capture blob download', error);
+          });
+        })(\(paramsJson));
+        """
+
+        DispatchQueue.main.async {
+            webView.evaluateJavaScript(script) { _, error in
+                if let error {
+                    self.emitDownloadFailed(sourceURL: blobUrl, error: "Failed to capture blob download: \(error.localizedDescription)")
+                }
+            }
+        }
+    }
+
     internal var customUserAgent: String? {
         didSet {
             guard let agent = userAgent else {
@@ -1301,6 +1654,16 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
                 print("Received non-dictionary message from JavaScript:", message.body)
                 emit("messageFromWebview", data: ["rawMessage": String(describing: message.body)])
             }
+        } else if message.name == "blobDownload" {
+            handleLegacyBlobDownloadPayload(message.body)
+        } else if message.name == "blobDownloadStart" {
+            startBlobDownloadPayload(message.body)
+        } else if message.name == "blobDownloadChunk" {
+            appendBlobDownloadChunkPayload(message.body)
+        } else if message.name == "blobDownloadFinish" {
+            finishBlobDownloadPayload(message.body)
+        } else if message.name == "blobDownloadAbort" {
+            abortBlobDownloadPayload(message.body)
         } else if message.name == "consoleMessageHandler" {
             if let messageBody = message.body as? [String: Any] {
                 emit("consoleMessage", data: ConsoleMessageSupport.normalizePayload(from: messageBody))
@@ -1446,6 +1809,21 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
                         },
                         close: function() {
                                 window.webkit.messageHandlers.close.postMessage(null);
+                        },
+                        handleBlobDownload: function(payload) {
+                                window.webkit.messageHandlers.blobDownload.postMessage(payload);
+                        },
+                        startBlobDownload: function(payload) {
+                                window.webkit.messageHandlers.blobDownloadStart.postMessage(payload);
+                        },
+                        appendBlobDownloadChunk: function(payload) {
+                                window.webkit.messageHandlers.blobDownloadChunk.postMessage(payload);
+                        },
+                        finishBlobDownload: function(payload) {
+                                window.webkit.messageHandlers.blobDownloadFinish.postMessage(payload);
+                        },
+                        abortBlobDownload: function(payload) {
+                                window.webkit.messageHandlers.blobDownloadAbort.postMessage(payload);
                         }\(extraControls)\(screenshotControls)
                 });
                 if (!window.__capgoInAppBrowserWindowCloseInstalled) {
@@ -1575,6 +1953,11 @@ open class WKWebViewController: UIViewController, WKScriptMessageHandler {
         userContentController.add(weakHandler, name: "close")
         userContentController.add(weakHandler, name: "hide")
         userContentController.add(weakHandler, name: "show")
+        userContentController.add(weakHandler, name: "blobDownload")
+        userContentController.add(weakHandler, name: "blobDownloadStart")
+        userContentController.add(weakHandler, name: "blobDownloadChunk")
+        userContentController.add(weakHandler, name: "blobDownloadFinish")
+        userContentController.add(weakHandler, name: "blobDownloadAbort")
         if allowScreenshotsFromWebPage {
             userContentController.add(weakHandler, name: "takeScreenshot")
         }
@@ -3001,7 +3384,10 @@ extension WKWebViewController: WKNavigationDelegate {
     }
 
     public func webView(_ webView: WKWebView, decidePolicyFor navigationAction: WKNavigationAction, decisionHandler: @escaping (WKNavigationActionPolicy) -> Void) {
-        let shouldForceDownload = handleDownloads && navigationAction.shouldPerformDownload
+        if handleDownloads && navigationAction.shouldPerformDownload {
+            decisionHandler(.download)
+            return
+        }
 
         var actionPolicy: WKNavigationActionPolicy = self.preventDeeplink ? .preventDeeplinkActionPolicy : .allow
 
@@ -3011,6 +3397,16 @@ extension WKWebViewController: WKNavigationDelegate {
             return
         }
 
+        if handleDownloads, url.scheme?.lowercased() == "blob" {
+            handleBlobDownloadFromPage(
+                blobUrl: url.absoluteString,
+                mimeType: navigationAction.request.value(forHTTPHeaderField: "Content-Type"),
+                contentDisposition: navigationAction.request.value(forHTTPHeaderField: "Content-Disposition")
+            )
+            decisionHandler(.cancel)
+            return
+        }
+
         if url.absoluteString.contains("apps.apple.com") {
             UIApplication.shared.open(url, options: [:], completionHandler: nil)
             decisionHandler(.cancel)
@@ -3067,11 +3463,6 @@ extension WKWebViewController: WKNavigationDelegate {
                 actionPolicy = result ? .allow : .cancel
             }
 
-            if shouldForceDownload, actionPolicy != .cancel {
-                decisionHandler(.download)
-                return
-            }
-
             self.injectJavaScriptInterface()
             decisionHandler(actionPolicy)
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capgo/capacitor-inappbrowser",
-  "version": "8.7.7",
+  "version": "8.7.9",
   "description": "Capacitor plugin in app browser",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",