• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Protocol Handling?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Protocol Handling?


  • Subject: Re: Protocol Handling?
  • From: Oleg Kibirev <email@hidden>
  • Date: Thu, 21 Jun 2007 14:30:06 -0700

Note that the consequence of doing so is that any malicious web site will be able to launch your application and attempt to exploit the host by crafting URL parameters. After this issue was publicized, Apple patched OSX to only invoke URL handlers after the application was explicitly launched by user once to guard against handlers in just-downloaded DMGs. Nevertheless, this functionality should be reserved for very few programs. The very fact of an unwanted application launch when one's Google search redirects to a seedy website may alarm the user or make them think you are affiliated with the site's owners.

Oleg

On Jun 20, 2007, at 6:00 PM, Shawn Erickson wrote:

On 6/20/07, Rick Langschultz <email@hidden> wrote:
I was wondering how would it be possible to launch an external
application from Safari/Webkit/Firefox/etc. I know that Safari will
launch an iTunes window/storefront if you click the link. How does
this happen though - it appears to be a regular anchor <a> to a
WebObjects application. Is there something I need to read to
accomplish this?

Applications can state what URL schemes they support. Safari (likely Firefox as well) will then use launch services to see if an application exists on the users system that supports the given URL scheme (MyApplicationScheme://blah) and if so ask launch services to have that application open the URL.

-Shawn
_______________________________________________

Cocoa-dev mailing list (email@hidden)

Do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
40oracle.com


This email sent to email@hidden

_______________________________________________

Cocoa-dev mailing list (email@hidden)

Do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


  • Follow-Ups:
    • Re: Protocol Handling?
      • From: Shawn Erickson <email@hidden>
References: 
 >Protocol Handling? (From: Rick Langschultz <email@hidden>)
 >Re: Protocol Handling? (From: "Shawn Erickson" <email@hidden>)

  • Prev by Date: screen dump crash with out sleep
  • Next by Date: WebKit and POST requests
  • Previous by thread: Re: Protocol Handling?
  • Next by thread: Re: Protocol Handling?
  • Index(es):
    • Date
    • Thread