← Back to release summary

Limit registerProtocolHandler() url argument to http/https

Category
Security
Type
New or changed feature
Status
Enabled by default (Chrome 77)
Intent stage
None

Summary

Limits registerProtocolHandler() to only accept URLs with http or https schemas. Because the intent of the API is to allow and endpoint to handle something like an SMS message, for example, it doesn't make much sense for handlers to be data URLs, blob URLs, or whatever.

Standards & signals

Docs: https://developer.mozilla.org/en-US/docs/Web/API/Navigator/registerProtocolHandler

View on chromestatus.com