restrict supported URL schemas

2026-07-03 14:05:24 +02:00 · 2025-11-27 19:10:18 +01:00
parent 51d7e5df62
commit db7365c3b3
1 changed files with 14 additions and 1 deletions
@@ -91,7 +91,20 @@ public class WebViewActivity extends PassphraseRequiredActionBarActivity
      // so, to support all systems, for now, using the old one seems to be the simplest way.
      @Override
      public boolean shouldOverrideUrlLoading(WebView view, String url) {
-        if (url != null) return openOnlineUrl(url);
+        if (url != null) {
+          String schema = url.split(":")[0].toLowerCase();
+          switch (schema) {
+            case "http":
+            case "https":
+            case "gemini":
+            case "tel":
+            case "sms":
+            case "mailto":
+            case "openpgp4fpr":
+            case "geo":
+              return openOnlineUrl(url);
+          }
+        }
        return true; // returning `true` aborts loading
      }