NEW158494
Universal links open native applications while using [WKWebsiteDataStore nonPersistentDataStore]
https://bugs.webkit.org/show_bug.cgi?id=158494
Summary Universal links open native applications while using [WKWebsiteDataStore nonP...
michaeldo
Reported 2016-06-07 14:29:24 PDT
When a user clicks a link while in a WKWebView in "private browsing" mode, Universal Links still open the native application. This has privacy implications as it unexpectedly removes the user from the private context, exposing the data they selected to the native application. Steps to reproduce: 1) Install and log in to the LinkedIn app 2) Open Safari and enter "Private" mode (or an app using a WKWebView with nonPersistentDataStore) 3) Search for somebody's LinkedIn and click on the link Expected behavior: Safari/WKWebView should open the URL directly within the Private context instead of launching the native app. Actual behavior: The link navigates to the LinkedIn application and display's the selected user's profile. Radar: 26682400
Attachments
Note You need to log in before you can comment on or make changes to this bug.