Zoom, CORS, and the Web

1 · CSS-Tricks · July 23, 2019, 4:15 p.m.
It's sorta sad by funny that that big Zoom vulnerability thing was ultimately related to web technology and not really the app itself. There is this idea of custom protocols or "URL schemes." So, like gittower:// or dropbox:// or whatever. A native app can register them, then URLs that hit them get passed to the native app. iOS has "universal links" which are coming to the web apparently. (Atishay Jain has an excellent write-up on them.) But … Read article The post Zoom, CORS, and the Web appe...