ReWeb

Restricted Web · a browser with an allowlist

Only the webyou allow.

ReWeb is a browser that opens the sites on your list and nothing else. Add what your kids may watch, what your staff need, what your booth should show — everything else stays out. Web apps that need to scan, snap or record can call native features directly.

Get ReWeb See what it does
Site allowlist live navigation · managed
  1. ✓en.wikipedia.orgallowed
  2. ✕casino-bonus.examplenot listed
  3. ✓oa.corp.example/approvesubdomain
  4. ✕javascript:alert(1)not http(s)
  5. ✓kids.example/cartoon/42path prefix
  6. ✕kids.example/cartoonspath boundary
Empty allowlist = block everything Never fails open

NO “MODE” SWITCH

One configuration, four very different devices. Hide the address bar and it's a kids' browser. List your intranet domains and it's a company portal. Pin a default site in full screen and it's a kiosk. Tick “Scanner” on a site and it's a barcode gun.

01 FAMILIES

A tablet that only has
the sites you picked

Add cartoons, an encyclopedia and a few learning sites, then turn off the address bar. Those icons are all your child can tap. Links that wander off are stopped, and the notice never shows the blocked address — so there's nothing to go and search for.

  • Down to the pathAllow /cartoon without letting /cartoons slip through
  • No long-press menuSelection and copy are off by default, along with escape hatches like “Open in browser”
  • Settings need a passwordWrong guesses back off exponentially, and force-quitting the app doesn't reset the count
  • A way out of full screenHold any corner for 10 seconds — it asks for the password, never just exits

02 BUSINESS

An intranet portal that
stays inside the company

List the domains for approvals, expenses, tickets and your wiki, and turn on “Include subdomains” so new internal tools work without being registered one by one. Shared devices at reception, in the warehouse or on the shop floor now do one thing: work.

  • Strict page resourcesImages and scripts load only from your own and allowlisted domains — third-party trackers stay out
  • Home-screen icons use reweb://Shortcuts can't be hijacked by the system's default browser, so there's no back door
  • No passwords in config filesExport a configuration to other devices; admin credentials stay in this device's keychain
  • Anti-phishingThe domain is always shown at the top, so people know whose site they're on

03 KIOSKS

Booths, stores, lobbies —
screens that run unattended

Pick a default site and it opens full screen, keeps the display awake and refreshes on a timer. Network drops, blank pages and crashed renderers recover on their own, because nobody on a show floor is going to tap “Retry”.

  • Retries forever2s → 5s → 15s → 60s, then once a minute — the content returns with the network
  • Blank counts as brokenAn empty response or a crashed script triggers a reload too
  • Daily reloadMemory creep from long uptime is cleared quietly overnight
  • Visitors can't get outNo buttons, no address bar, and the exit gesture is behind a password

04 NATIVE POWER

Your web-based WMS,
and every phone is a scanner

Scanning inside a web page is usually slow and picky about light. ReWeb hands the native scanning engine to allowlisted sites: continuous scanning, de-duplication, torch control and a dozen barcode formats, all one line of JavaScript away. No separate warehouse app to build.

  • ScanningQR, Code 128, EAN-13, PDF417, Data Matrix… stock counts without double-counting
  • CameraFront, back or photo library — delivery slips and damaged goods go straight back to your app
  • Long recordingsKeeps going with the screen off or the app in the background; uploads resume natively
  • Per-site permissionsA site gets exactly the features an admin ticked for it, nothing more

Control isn't a coat of paint.

These details decide whether a managed device is actually managed.

i

Fails closed

An empty allowlist or a broken config blocks everything. It never lets everything through.

ii

Known bypasses covered

user@host tricks, look-alike suffixes, pasted javascript:, .. traversal — each has a test case.

iii

Passwords done properly

PBKDF2 with 310,000 iterations in the system keychain, plus a one-time recovery code shown exactly once.

iv

Recording is visible

A persistent banner shows while recording, alongside the system's own microphone indicator.

For web developers

The same page uses web APIs in a regular browser and native features inside ReWeb. Branch on capabilities(), never on the platform name.

  • reweb.scanner single or continuous scans, decode from image
  • reweb.camera take photos, pick from library
  • reweb.recorder background recording, pause & resume, native upload
  • reweb.files local streaming URLs, retryable uploads
  • reweb.device keep awake, vibrate

Every capability has a reference page whose source you can copy as-is: Open the reference pages → 

if (!window.reweb) {
  // Regular browser → fall back to getUserMedia / <input type=file>
} else if (!(await reweb.capabilities()).scanner) {
  showHint('Ask your admin to enable “Scanner” for this site');
} else {
  const code = await reweb.scanner.scan({ torch: 'auto' });
  fill(code.text);
}

Get ReWeb

iOS · iPadOS Coming soon to the App Store
Android Coming soon
macOS · Windows · Linux In development

Want early access, or rolling it out across a team? Leave us a note below and we'll get in touch.

Feedback

A bug, a feature you'd like, the way you use ReWeb — we'd love to hear it. We read every message.

Or email us directly info@mostlink.com

Type