4 ms·
For informational purposes: The way it lets workflows create apps, is that it creates a data url, that it opens in safari, and l has you bookmark that URL to y
by nmcfarl 12y ago
For informational purposes:
The way it lets workflows create apps, is that it creates a data url, that it opens in safari, and l has you bookmark that URL to your home screen. When opened as one of those safari web apps, the javascript on the page auto clicks the only link in the page - one to a URL formated like this: workflow000000://x-callback-url/run-workflow?id=HEX, and bounces you into Workflow
- Someone 12y agoWhat are the security implications of that? Does that mean that any web page can run a random workflow on your iPad, or are the hex strings so long that it is as good as impossible to guess one, or (way worse) is the hex string an encoding of the steps to run?
- nmcfarl 12y agoI don't have them in front of me right now but the hex is long. I have no clue if they encode something, but I remember thinking "UUID".
- conradev 12y agoThe hex in the scheme is one of a list of preconfigured colors for the purpose of theming the launch image. The hex in "id" is indeed a UUID. There is also a "name" parameter.