While I don't have an immediate exploit, attackers tricking a user to start applications does feel like in should be classified as a security bug.
I've _never_ gotten asked what application to start for a given uri scheme. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1963861 Title: Can't tell what application will be launched with custom schemes To manage notifications about this bug go to: https://bugs.launchpad.net/snapd/+bug/1963861/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs