urlscheme ios security paper - SERP Analysis

https://www.sans.org/blog/insecure-handling-of-url-schemes-in-apples-ios/

https://developer.apple.com/documentation/xcode/defining-a-custom-url-scheme-for-your-app

https://www.infosecinstitute.com/resources/application-security/ios-application-security-part-30-attacking-url-schemes/

https://homes.luddy.indiana.edu/luyixing/papers/ccs15_xara.pdf

https://medium.com/%40saurabhmishra2290/mastering-universal-links-in-ios-enhancing-security-and-user-experience-1101384e951c

https://www.diva-portal.org/smash/get/diva2:1691563/FULLTEXT01.pdf

https://securityaffairs.com/88469/hacking/ios-url-scheme-flaw.html

https://cwe.mitre.org/data/definitions/939.html

https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf

https://developer.omnissa.com/ws1-uem-sdk-for-ios/technical/URLSchemeReplacement.pdf

https://thehackernews.com/2019/07/ios-custom-url-scheme.html

https://www.cobalt.io/blog/learning-ios-app-pentesting-and-security-part-1

https://stinger.io/mobile/ios/Dynamic-Analysis/iOS-Fuzzing-Custom-URL-Schemes/

https://8ksec.io/ios-deeplink-attacks-part-1-introduction-8ksec-blogs/?srsltid=AfmBOorhcoBoTi-tyxYGElKrSX_-hYWf6cMg8PTQGhdOvdN_hA-W91F8

https://www.w3.org/TR/app-uri/

https://support.hogbaysoftware.com/t/url-scheme/3533

https://developers.google.com/maps/documentation/urls/ios-urlscheme

https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/liu

https://github.com/coolx28/Owasp-Mstg/blob/master/Document/0x06h-Testing-Platform-Interaction.md

https://learn.microsoft.com/en-us/intune/intune-service/apps/app-protection-policy-settings-ios

https://css.csail.mit.edu/6.858/2023/readings/ios-security-may19.pdf

https://benoitpasquier.com/deep-linking-url-scheme-ios/

https://x-callback-url.com/specification/

https://www.jamf.com/blog/remote-mac-exploitation-via-custom-url-schemes/

https://median.co/docs/url-scheme-protocol

https://stackoverflow.com/questions/72917593/are-there-any-security-issues-with-using-custom-url-schemas-as-a-redirect-uri-fo

https://github.com/WICG/isolated-web-apps/blob/main/Scheme.md

https://www.w3.org/TR/2013/WD-app-uri-20130516/

https://css.csail.mit.edu/6.5660/2018/readings/ios-security-march17.pdf

https://appleinsider.com/articles/18/09/05/remote-macos-exploit-using-custom-url-schemes-demonstrated-by-security-researcher

https://mas.owasp.org/MASTG/tests/ios/MASVS-PLATFORM/MASTG-TEST-0075/

https://www.macstories.net/tag/url-scheme/

https://www.computer.org/csdl/proceedings-article/mobilesoft/2016/07832998/12OmNz6iOuw

https://community.microstrategy.com/s/article/KB441097-The-URL-Scheme-is-Ignored-in-Internal-links-Used-on-MicroStrategy-Mobile-Platform-10-8-iOS-App?language=en_US

https://help.salesforce.com/s/articleView?id=sf.sapp_url_schemes_format.htm&language=en_US&type=5

https://ia.net/writer/support/help/url-commands

https://stackoverflow.com/questions/23448051/ios-safely-pass-content-between-apps

https://support.craft.do/hc/en-us/articles/360020168838-Using-URL-Scheme

https://issues.chromium.org/40091647

https://news.ycombinator.com/item?id=40815320

https://www.reddit.com/r/shortcuts/comments/n3bhia/list_of_app_url_schemes_including_detailed_paths/

https://docs.ostorlab.co/kb/IPA_URL_SCHEME_INJECTION/index.html

https://support.hogbaysoftware.com/t/url-scheme/3533/10

https://discussion.evernote.com/forums/topic/79279-non-http-url-schemes-in-notes-and-links/

https://hacktricks.boitatech.com.br/mobile-apps-pentesting/ios-pentesting/ios-custom-uri-handlers-deeplinks-custom-schemes

https://forums.getdrafts.com/t/link-mode-open-app-specific-url-s/3757

https://blogs.halodoc.io/deep-linking-using-url-scheme-in-ios/

https://community.atlassian.com/forums/Confluence-questions/How-do-I-create-a-url-scheme-so-that-I-can-open-a-url-with-an/qaq-p/957889

https://community.claris.com/en/s/question/0D50H00006ezahASAQ/problems-with-ios-sdk-url-scheme

https://paul.kinlan.me/detecting-if-a-url-scheme-can-be-handled/

https://answers.microsoft.com/en-us/msoffice/forum/all/launch-microsoft-office-mobile-with-an-url-scheme/3eec0008-8140-4af0-82d1-2efeee8bede9

https://docs.ostorlab.co/kb/IPA_URL_SCHEME_HIJACKING/index.html

https://stinger.io/mobile/ios/Dynamic-Analysis/iOS-Univeral-Links/

https://www.branch.io/resources/blog/universal-links-uri-schemes-app-links-and-deep-links-whats-the-difference/

https://www.l9group.com/research/ios-secure-development-guide-2/

https://www.reddit.com/r/workflow/comments/3mux7h/ios_url_schemes/

https://infosecwriteups.com/exploiting-unsanitized-url-handling-sql-injection-via-deep-links-in-ios-app-write-up-of-flipcoin-066899b09fc2

https://chatlio.com/docs/custom-url-scheme/

https://9to5mac.com/2018/09/04/security-researcher-highlights-macos-remote-exploit-w-custom-url-schemes/

https://docs.unity3d.com/6000.0/Documentation/Manual/deep-linking-ios.html

https://www.cse.cuhk.edu.hk/~cslui/PUBLICATION/ASIACCS15.pdf

https://www.branch.io/glossary/uri-schemes/

https://allthingscloud.blog/ios-mam-policies-discovering-url-protocols-and-data-transfer-exceptions/

https://docs.oracle.com/middleware/maf221/mobile/develop-oepe/oepe-maf-ui-remote-url.htm

https://docs.parallels.com/integrating-with-parallels-ras-clients/parallels-client-url-scheme/url-scheme-basics

https://www.macrumors.com/2018/09/05/security-macos-exploit-custom-url-schemes/

https://sites.cs.ucsb.edu/~chris/research/doc/most15_study.pdf

https://docs.citrix.com/en-us/mam-sdk/policies-platform/policies-ios.html

https://dl.acm.org/doi/10.1145/2810103.2813609

https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/data

https://seredynski.com/articles/a-security-review-of-1-300-appstore-applications/

https://developers.egnyte.com/docs/read/Mobile_Development

https://lapcatsoftware.com/articles/zoom.html

https://www.mbsd.jp/Whitepaper/IntentScheme.pdf

https://www.researchgate.net/publication/301419840_Cracking_App_Isolation_on_Apple

https://developer.android.com/training/app-links/deep-linking

https://ios.gadgethacks.com/how-to/ios-17-2-includes-50-new-url-schemes-you-can-use-shortcuts-your-iphone-0385465/

https://www.der-windows-papst.de/wp-content/uploads/2015/06/Unauthorized-Cross-App-Resource-Access-on-MAC-OS-X-and-iOS.pdf

https://blog.0patch.com/2021/09/micropatches-for-file-extension-url.html

https://docs.python.org/3/library/urllib.parse.html

https://firebase.google.com/docs/auth/ios/phone-auth

https://www.vaadata.com/blog/what-are-deep-links-vulnerabilities-attacks-and-security-best-practices/

https://www-users.cse.umn.edu/~kjlu/papers/jekyll.pdf

https://capacitorjs.com/docs/v3/guides/security

https://en.wikipedia.org/wiki/About_URI_scheme

https://www.slideshare.net/raviaggarwal9465/ios-application-securitypdf

https://www.thesslstore.com/blog/chrome-data-url-phishing/

https://www.ndss-symposium.org/wp-content/uploads/madweb2022_23003_paper.pdf

https://mimecastsupport.zendesk.com/hc/en-us/articles/34000589915155-Targeted-Threat-Protection-URL-Protect-Configuring-URL-Protect-Definitions

https://docs.pingidentity.com/sdks/latest/sdks/use-cases/social-login/setup-ios.html

https://www.sciencedirect.com/science/article/pii/S2352711023001449

https://datatracker.ietf.org/doc/html/rfc4157

https://medium.com/simform-engineering/security-aspects-to-consider-for-a-react-native-application-95556f0e4244

https://community.cisco.com/t5/call-control/what-s-the-scheme-url-of-app-transfer-to-jabber-and-trigger-to/td-p/4668365

https://docs.citrix.com/en-us/mobile-productivity-apps/administrator-tasks/policies-ios.html

https://rderik.com/blog/managing-uti-and-url-schemes-via-launch-services-api-from-swift/

https://community.sap.com/t5/technology-q-a/sap-bi-mobile-ipad-app-custom-url-scheme/qaq-p/8144032

https://mas.owasp.org/MASTG/tests/android/MASVS-PLATFORM/MASTG-TEST-0028/

https://developer.revolut.com/docs/guides/accept-payments/payment-methods/revolut-pay/mobile/ios/revolut-pay-ios

https://community.adobe.com/t5/acrobat-reader-mobile-discussions/how-to-open-adobe-reader-file-from-another-native-ios-application/td-p/4076205