<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Universal links open native applications while using [WKWebsiteDataStore nonPersistentDataStore]"
href="https://bugs.webkit.org/show_bug.cgi?id=158494">158494</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Universal links open native applications while using [WKWebsiteDataStore nonPersistentDataStore]
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>Safari 9
</td>
</tr>
<tr>
<th>Hardware</th>
<td>iOS
</td>
</tr>
<tr>
<th>OS</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>Major
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>Page Loading
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>michaeldo@chromium.org
</td>
</tr>
<tr>
<th>CC</th>
<td>beidson@apple.com
</td>
</tr></table>
<p>
<div>
<pre>When a user clicks a link while in a WKWebView in "private browsing" mode, Universal Links still open the native application. This has privacy implications as it unexpectedly removes the user from the private context, exposing the data they selected to the native application.
Steps to reproduce:
1) Install and log in to the LinkedIn app
2) Open Safari and enter "Private" mode (or an app using a WKWebView with nonPersistentDataStore)
3) Search for somebody's LinkedIn and click on the link
Expected behavior:
Safari/WKWebView should open the URL directly within the Private context instead of launching the native app.
Actual behavior:
The link navigates to the LinkedIn application and display's the selected user's profile.
Radar: 26682400</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>