Deep Linking

Deep linking lets a link open a specific screen inside an app rather than its home screen. It is useful, but the data carried in a deep link comes from outside the app, so it has to be treated as untrusted input.

If an app acts on deep-link parameters without checking them, an attacker can craft a link that sends the user to a chosen destination or triggers an action. Testing confirms that deep links are validated before the app trusts them.