47 lines
3.6 KiB
Markdown
47 lines
3.6 KiB
Markdown
# Private Facebook Wrapper (Android)
|
|
|
|
A high-security, open-source WebView wrapper for Facebook, engineered as a **Digital Faraday Cage** for your social media usage. This app is architected to break Facebook's cross-app tracking, hardware fingerprinting, and persistent background telemetry.
|
|
|
|
## 🛡️ Advanced Privacy Features
|
|
|
|
This wrapper goes beyond standard "privacy browsers" by implementing deep-level request interception and execution isolation:
|
|
|
|
* **Controlled Fetch Engine**: The app intercepts all Main Frame GET requests and performs a manual fetch via `HttpURLConnection`. This allows for total control over the request lifecycle.
|
|
* **Total X-Requested-With Stripping**: Completely removes the header that identifies the Android app to Facebook's servers, making the traffic appear as a generic mobile browser.
|
|
* **External Link Isolation (The "Double-Lock")**: Implements a strict two-stage gatekeeper. Any navigation attempt to a non-Facebook domain is immediately "snatched" by the OS and forced into your default system browser. This ensures third-party sites are never rendered inside the app's persistent container, preventing cross-site leakage.
|
|
* **Strict Content Security Policy (CSP)**: Enforces a custom, injected CSP that physically blocks the browser from loading scripts, tracking pixels, or frames from third-party domains.
|
|
* **Fingerprint Mitigation**: Injects a hardened JavaScript layer (on `onPageFinished`) to:
|
|
* **Disable WebRTC**: Nullifies `RTCPeerConnection` to prevent local/VPN IP leaks via STUN/TURN queries.
|
|
* **Canvas/WebGL Muffling**: Disables 2D and 3D canvas read-back attempts used for hardware sketching.
|
|
* **Privacy-Hardened User-Agent**: Spoofs a generic, non-identifiable Chrome-on-Android string to prevent device-specific tracking.
|
|
* **Sponsored Content Removal**: Includes an integrated mutation observer that identifies and removes "Sponsored" and "Suggested" posts in real-time from the DOM.
|
|
* **Zero Permissions Architecture**: Requires no access to contacts, location, microphone, camera, or files. The app is a self-contained silo.
|
|
* **Network Hardening**: Uses `network_security_config` to force HTTPS and block all cleartext traffic at the OS level.
|
|
|
|
## 🚀 Technical Stack
|
|
|
|
* **Language**: Kotlin
|
|
* **Security Layer**: Intercept-and-Modify architecture using `shouldInterceptRequest` and `shouldOverrideUrlLoading`.
|
|
* **Hardware Acceleration**: Uses hardware-layer rendering for high-performance video and media playback without sacrificing privacy.
|
|
* **Persistence**: Session cookies are manually flushed to disk on navigation, ensuring login stability without the need for background sync services.
|
|
* **Zero-Background Footprint**: Optimized for use with app-freezing tools (like Shelter or Hail). The app maintains no background services, receivers, or workers.
|
|
|
|
## 🛠️ How to Build
|
|
|
|
1. **Clone the repository**.
|
|
2. **Open in Android Studio**.
|
|
3. **Assets**: Ensure your `filters.txt` (AdBlock rules) is present in `app/src/main/assets/`.
|
|
4. **Network Config**: Verify `network_security_config.xml` is defined to enforce TLS.
|
|
5. **Build APK**: Go to `Build > Build Bundle(s) / APK(s) > Build APK(s)`.
|
|
|
|
## 📜 License
|
|
|
|
Licensed under the **GNU GPLv3**. This ensures the code remains open, transparent, and protected from proprietary enclosure.
|
|
|
|
---
|
|
|
|
**Disclaimer**: This is an independent open-source project and is not affiliated with, authorized, maintained, sponsored, or endorsed by Meta Platforms, Inc.
|
|
|
|
[](https://ko-fi.com/theunknownuniverse)
|
|
|
|
https://unknownuniverse.uk |