Skip to content

Allow this site to count your visits with Yandex Metrica? Metrica will store cookies in your browser to do this. How the site uses cookies

VC
← All cases

Case 20 of 25 · Own development

Android apps with WebView: development, APK analysis and release checks

I build Android apps in Kotlin that combine native screens with an embedded web section. My own projects cover the full path from inspecting an APK and working with source code to producing a signed build and checking it on an emulator.

  • Kotlin
  • Android WebView
  • Gradle
  • APK / AAB
  • AndroidX
  • Firebase Remote Config
Home screen of my TowerFoundry Android app
My TowerFoundry build during Android emulator checks on 23 October 2026. The app combines a local game with a separate WebView.

The task

The app combines a local mini-game with a web section. The game stores progress on the device; the embedded browser opens a web product, follows navigation and requests access to device features.

The work includes the details people encounter after installation: Back navigation, file selection, downloads, rotation, activity recreation and a useful network-error screen.

What I implemented

  • Native Kotlin screens and game logic, saved progress, onboarding, sound and haptics.
  • A WebView with navigation history, popups, fullscreen video and a return path to the native screen.
  • File selection and downloads through Android system dialogs; separate permission requests for camera and microphone.
  • Confirmation for external links and an explicit error state when a TLS check fails.
  • Browser history and screen-state restoration during normal activity recreation.
  • Separate Debug and Release variants, external private build settings and R8 release shrinking.

Compilation and decompilation

I use Gradle to produce installable APKs and AABs for publication. For each artifact I check the package ID, version, permissions, resources and signature.

My APK-analysis work includes inspecting the manifest, resources, included libraries and interface behaviour. Partial analysis helped specify the required behaviour for a new implementation in my own app.

The source that can be recovered depends on the language, obfuscation and build contents. I assess the actual artifact and available source before estimating recovery work. I analyse my own apps or work with the rights holder’s permission.

Verification

The projects include automated tests for game logic, navigation policies, analytics consent and event queues. Release candidates have saved build, lint, signature and emulator checks.

File selection, permissions, browser restoration, offline states and certificate errors have separate scenarios. A version and APK checksum identify the exact candidate used in a check.

Result and scope

The work produced own source projects, working app builds and a repeatable preparation and verification process. I use that experience to build Android apps, add a web section and maintain existing projects.

This case covers development and build verification. Store acceptance and external-service behaviour are checked separately for each app. Sales growth and install counts were not measured in this project.

Ready to start?

Start with the 5,000 ₽ audit: a written report and a payback estimate

I'll tell you what to automate first, when it will pay for itself and whether your task needs AI at all. Sometimes it doesn't.

Or just ask a question. During business hours I reply within 2 hours