Examples of why this is bad: * http://example.com/settings/transferownership?to=efreak http://example.com/settings/transferownership?to=efreak * http://example

Examples of why this is bad: * http://example.com/settings/transferownership?to=efreak http://example.com/settings/transferownership?to=efreak * http://example.com/settings/deleteaccount?confirm=true http://example.com/settings/deleteaccount?confirm=true * http://example.com/sendmoney?to=efreak&amount=10000 http://example.com/sendmoney?to=efreak&amount=10000 Might need a redirect. Do previews follow redirects? Does your poorly-written chat app filter urls by protocol, or does it just look for a token with '://'? A good app will allow me to link to things like steam://connect/IP so I can invite you to a game. * tel:9005555555 (call a phone number. Fortunately, this requires confirmation these days, but what if you're on desktop or the app that does texting can directly make calls without invoking the dialer?) * steam://exitsteam (steam will exit if it's running)