zjhiphop

Specs: https://html.spec.whatwg.org/#dom-navigator-registerprotocolhandler

Examples: https://developer.mozilla.org/zh-CN/docs/Web-based_protocol_handlers

Some answers: http://stackoverflow.com/questions/364895/register-an-application-to-a-url-protocol-all-browsers-via-installer http://stackoverflow.com/questions/7684663/external-protocol-handlers-and-modern-browsers

paragonie-scott

Hello software developers,

Please check your code to ensure you're not making one of the following mistakes related to cryptography.

I. General Mistakes

• Writing your own home-grown cryptography primitives (For example: Mifare Classic)
  • Exception: For the sake of learning, but don't deploy it in production.
• Using a fast hash function (e.g. MD5, SHA256) for storing passwords. Use bcrypt instead.
• Not using a cryptographically secure random number generator

david-risney

This code won't run - just trying to get the idea across of how we might replace registerProtocolHandler, but only if register and registee both agree to use the replacement.


Page that wants to register:
<iframe class="hidden" src="http://you.github.io/registerProtocolHandler/" id="registerProtocolHandler"></iframe>
<script>
document.getElementById("registerProtocolHandler").contentWindow.postMessage({
    operation: "setRegistration", 
    scheme: "web+action",
    handler: "http://me.com/?url=%s"