3 ms·
> previews of non-public websites It would be interesting if browsers / OSes / apps offered a way to use the browser's cookie jar / basic auth headers / whatev
by hunter2_ 4y ago
> previews of non-public websites
It would be interesting if browsers / OSes / apps offered a way to use the browser's cookie jar / basic auth headers / whatever sessioning scheme in whatever apps the user decides should display authenticated previews. Ask the user to allow the release of browser data scoped to the domains that the app suggests. Similar to how some Android apps can put up a prompt to release a Chrome-saved password to an app (which I really wish more apps would include).
- withinboredom 4y agoI just include a screenshot. It’s not that hard.
- gdprrrr 4y agoPlesse no
- efreak 4y agoExamples of why this is bad: * http://example.com/settings/transferownership?to=efreak http://example.com/settings/transferownership?to=efreak * http://example.com/settings/deleteaccount?confirm=true http://example.com/settings/deleteaccount?confirm=true * http://example.com/sendmoney?to=efreak&amount=10000 http://example.com/sendmoney?to=efreak&amount=10000 Might need a redirect. Do previews follow redirects? Does your poorly-written chat app filter urls by protocol, or does it just look for a token with '://'? A good app will allow me to link to things like steam://connect/IP so I can invite you to a game. * tel:9005555555 (call a phone number. Fortunately, this requires confirmation these days, but what if you're on desktop or the app that does texting can directly make calls without invoking the dialer?) * steam://exitsteam (steam will exit if it's running)