Android Patch: New WebView API Enables Cross-Origin Isolation, Wallet Gets Receipt Scanning
Google’s latest system release brings a new WebView API for cross-origin isolation, alongside Wallet enhancements and PC connectivity improvements.

Key points
- New WebView API allows selective cross-origin isolated features via allowlists.
- Google Wallet gains receipt scanning and in-app message centre capabilities.
- Find Hub app installation is disabled on Aluminium devices in this update.
Google has published its October 2026 system updates, introducing a new WebView API for developers and enhancing wallet functionalities. The release also adjusts system management services across multiple platforms to improve stability and connectivity.
What happened
According to 9to5Google, the monthly Google System Release Notes detail changes for Play Services, the Play Store and system updates across Android phones, tablets, Wear OS, TV, Auto and PC. A key technical addition is a new Android WebView API that enables developers to selectively allow cross-origin isolated features, such as SharedArrayBuffer, for trusted origins using a configurable allowlist.
This update improves system management services to enhance upgradability, device connectivity, performance and stability across Auto, PC, Phone, TV and Wear OS platforms. On PCs, specifically Aluminium Googlebook devices, the update disables the installation of the Find Hub app and removes its capabilities.
For mobile users, Google Wallet receives several updates, including the ability to scan receipts, an in-app message centre and improved merchant names in transaction notifications. Google Pay on Chrome for Android now allows users to skip the Payment Request UI when providing name, email and phone number to merchants.
Additional features include AI Summary in Community Posts for catching up on trends, new tag chips in Collections for filtering content and summarized insights from user reviews via Ask Play. The release also includes general improvements to security, privacy and bug fixes, alongside new developer features for displaying web content.
Why it matters
The introduction of the WebView API provides developers with granular control over cross-origin isolated features, potentially enhancing application security and performance for trusted origins. This technical shift allows for more precise management of browser-like content within apps, which is critical for modern web-based functionalities.
For organisations managing device fleets, the removal of Find Hub on Aluminium devices and updates to system management services indicate ongoing refinements in Google’s ecosystem. These changes affect how devices connect, perform and receive updates, which can influence IT operations and support strategies for businesses relying on Android-based hardware and software.
The Wallet and Pay enhancements streamline user interactions, reducing friction in transactions and improving the overall customer experience. These updates reflect Google’s focus on integrating AI and convenience features into core services, which may influence user engagement and adoption rates for enterprise and consumer applications alike.
Next steps
- Review the new WebView API documentation to assess integration opportunities for cross-origin features.
- Monitor Find Hub removal impacts on Aluminium devices and adjust device management policies accordingly.
- Test Wallet and Pay updates to ensure compatibility with existing merchant integration workflows.
- Evaluate system management service improvements for potential enhancements in device connectivity and upgradability.
What to do and how to stay safe: Android
- Verify that your Android devices are updated to the latest system version to access security patches and new features.
- Review developer documentation for the new WebView API to understand how it may affect your applications.
- Monitor Google’s official release notes for any additional details on feature availability and rollout timelines.
- Ensure that your organisation’s device management policies account for changes in system services and app availability.
Step-by-step guide: Wifi router security: Stop hidden admin access from leaking data
General security guidance from the Packet Tribune newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the new WebView API in the October 2026 update?
It is a new API that allows developers to selectively enable cross-origin isolated features, like SharedArrayBuffer, for trusted origins using an allowlist.
Which devices are affected by the Find Hub changes?
Aluminium (Googlebook) PC devices have the Find Hub app installation disabled and its capabilities removed.
Are all features available immediately to all users?
No, some features are experimental and may only be available to certain users or take months to fully launch.



