Bug 242589

Summary: [Web Share] expand sharable schemes to HTML safe listed range
Product: WebKit Reporter: Marcos Caceres <marcosc>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: marcosc, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Other   
Hardware: Unspecified   
OS: Unspecified   

Description Marcos Caceres 2022-07-11 00:24:40 PDT
We currently only allow sharing http and https URLs. However, the Web Share API allows sharing the "safelisted schemes"[1], listed below (the list can change). 

We ca exclude/include other schemes.  

* bitcoin
* ftp
* ftps
* geo
* im
* irc
* ircs
* magnet
* mailto
* matrix
* mms
* news
* nntp
* openpgp4fpr
* sftp
* sip
* sms
* smsto
* ssh
* tel
* urn
* webcal
* wtai
* xmpp

It's worth checking if these are indeed safe to share and if there are any side effects or if they trigger any URL parser behavior. 


[1] https://html.spec.whatwg.org/#safelisted-scheme
Comment 1 Radar WebKit Bug Importer 2022-07-18 00:25:21 PDT
<rdar://problem/97179827>