OK, I found a workaround. Instead of using webview's dirctory picker, we can use native client's directory, like winform, WPF, whatever you use. Use postMessage to communicate.