R3 Specification

The x-callback-url specification has been updated to R3, with the addition of a brief section on security concerns. Recommending security methods is beyond the scope of the specification, but I thought it was a good idea to be encouraging developers to at least consider the security implications of adding URL scheme actions to their apps.

URLs are inherently anonymous and subject to attacks using maliciously constructed URLs placed in emails, web pages, etc., and your apps should be ready for that possibility.

Comments on improve this section are welcome.

SBRXCallbackURLKit x-callback-url integration lib

Sebastian Rehnby has published SBRXCallbackURLKit on Github. SBRXCallbackURLKit is a “simple library that makes it easy to add x-callback-url support to your app.”

SBRXCallbackURLKit has a block-based API for declaring URL handlers and Cocoapods support for easy integration. Worth a look if you are getting started on URL scheme integration in an app. You might also want to look at Inter-app Communication, which works in a similar fashion, and see which best suits your needs.