> I did test resource: URLs, they don’t load here (and neither when entered manually). Yes, we block loads of `resource://`, `content://` and `file://` URIs in general: https://github.com/mozilla-mobile/android-components/blob/master/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/GeckoEngineSession.kt#L152 So those shouldn't load via the QR scanner either. We should should still limit to just http(s) for the scanner.
Bug 1705094 Comment 3 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
> I did test resource: URLs, they don’t load here (and neither when entered manually). Yes, we block loads of `resource://`, `content://` and `file://` URIs in general: https://github.com/mozilla-mobile/android-components/blob/master/components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/GeckoEngineSession.kt#L152 So those shouldn't load via the QR scanner either. We should still limit to just http(s) for the scanner.