You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 10, 2024. It is now read-only.
Description:
Currently any valid URL scheme is loaded, we should restrict that to only http/https URLs.
Steps to Reproduce
javascript:alert(document.domain);
)Actual result:
For this QR code, it will do nothing because
javascript
schemes are only valid in a bookmarklet context.For other URLs likely they will fail to load
Expected result:
Any non-http/https URL should be submitted as a search query to the users default search engine
Reproduces how often:
Always
The text was updated successfully, but these errors were encountered: