Risks for using WebView for mobile applications
Do not use a WebView to display Amazon Pay web pages within your application.
WebViews pose a risk (such as cross-site scripting) on websites that contain private or sensitive data. To ensure your applications remain secure and optimized for the best possible user experience, follow the best practices below.
Use an approved browser-view mechanism such as Safari View Controller on iOS or Chrome Custom Tabs on Android. Please avoid using a WebView or similar custom browser mechanism to display Amazon Pay widgets in your application as it will break the functionality in the widgets.
Amazon Pay highly recommends using redirect authentication for mobile web to ensure an optimal user experience.
Note: This does not apply to buyers who are using mobile web browsers such as Safari, Chrome, etc.