Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is possible in theory.

For example, Safari opens the Apple Music without any user prompt. The app itself is designed to handle deep links (such as opening an album or starting the song).

That means you can perform a deep link forgery, in order to force the app to perform unwilling action without user confirmation.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: