A high-security, open-source WebView wrapper for Facebook, engineered as a Digital Faraday Cage for your social media usage. This app is architected to break Facebook's cross-app tracking, hardware fingerprinting, and persistent background telemetry.

🛡️ Advanced Privacy Features

This wrapper goes beyond standard "privacy browsers" by implementing deep-level request interception and execution isolation:

Controlled Fetch Engine: The app intercepts all Main Frame GET requests and performs a manual fetch via HttpURLConnection. This allows for total control over the request lifecycle.
Total X-Requested-With Stripping: Completely removes the header that identifies the Android app to Facebook's servers, making the traffic appear as a generic mobile browser.
External Link Isolation (The "Double-Lock"): Implements a strict two-stage gatekeeper. Any navigation attempt to a non-Facebook domain is immediately "snatched" by the OS and forced into your default system browser. This ensures third-party sites are never rendered inside the app's persistent container, preventing cross-site leakage.
Strict Content Security Policy (CSP): Enforces a custom, injected CSP that physically blocks the browser from loading scripts, tracking pixels, or frames from third-party domains.
Fingerprint Mitigation: Injects a hardened JavaScript layer (on onPageFinished) to:
- Disable WebRTC: Nullifies RTCPeerConnection to prevent local/VPN IP leaks via STUN/TURN queries.
- Canvas/WebGL Muffling: Disables 2D and 3D canvas read-back attempts used for hardware sketching.
- Privacy-Hardened User-Agent: Spoofs a generic, non-identifiable Chrome-on-Android string to prevent device-specific tracking.
Sponsored Content Removal: Includes an integrated mutation observer that identifies and removes "Sponsored" and "Suggested" posts in real-time from the DOM.
Zero Permissions Architecture: Requires no access to contacts, location, microphone, camera, or files. The app is a self-contained silo.
Network Hardening: Uses network_security_config to force HTTPS and block all cleartext traffic at the OS level.

🚀 Technical Stack

Language: Kotlin
Security Layer: Intercept-and-Modify architecture using shouldInterceptRequest and shouldOverrideUrlLoading.
Hardware Acceleration: Uses hardware-layer rendering for high-performance video and media playback without sacrificing privacy.
Persistence: Session cookies are manually flushed to disk on navigation, ensuring login stability without the need for background sync services.
Zero-Background Footprint: Optimized for use with app-freezing tools (like Shelter or Hail). The app maintains no background services, receivers, or workers.

🛠️ How to Build

Clone the repository.
Open in Android Studio.
Assets: Ensure your filters.txt (AdBlock rules) is present in app/src/main/assets/.
Network Config: Verify network_security_config.xml is defined to enforce TLS.
Build APK: Go to Build > Build Bundle(s) / APK(s) > Build APK(s).

📜 License

Licensed under the GNU GPLv3. This ensures the code remains open, transparent, and protected from proprietary enclosure.

Disclaimer: This is an independent open-source project and is not affiliated with, authorized, maintained, sponsored, or endorsed by Meta Platforms, Inc.

https://unknownuniverse.uk