3 ms·
Good find. I’m mostly surprised that Safari allows you to show a banner for any app. I would have thought that Apple would validate that the domain of the site
by strongpigeon 4y ago
Good find. I’m mostly surprised that Safari allows you to show a banner for any app. I would have thought that Apple would validate that the domain of the site matches what is registered in App Store Connect before it shows the banner, but apparently not.
Not a huge deal, you’re not fully de-anonymizing the user, but it’s an information leakage regardless.
- 542458 4y ago> domain of the site matches what is registered in App Store Connect before it shows the banner, but apparently not. This might be by design... For example, a podcast website might be interested in showing a banner for the app that you can get their podcast on. (This isn't a defence of the banners themselves, which IMO are naggy and unnecessary)