My goal is to prevent man-in-the-middle (MITM) attacks through proxies. I've implemented SSL pinning, which has helped significantly, but I'm wondering if there's anything more I can do that's worth the time in securing my connection? What can a user do to get around SSL pinning? Is there anything I can do to further prevent MITM attacks if the attacker gets around SSL pinning?
Right now, we're concerned with an attacker getting around pinning and using a proxy to be able to open the html page (by getting its URL from the proxy) in a device browser (like Chrome) outside of the app.