Google Vulnerability Report: insecure URI handling scheme

[osy]

Remove the URI scheme for performing VM operations because they can be triggered from the web browser.

[conath]

Kind of unfortunate to see this removed, given there's no AppleScript on iOS. This also breaks some of my Shortcuts which control UTM using the URL scheme. Maybe I can look into adding Shortcuts-API-based automation.

[osy]

Maybe we should implement a new API in iOS just for shortcuts. You want to open a new issue for that? The problem with the URL scheme is there's no way to authenticate the actions.

[conath]

I opened #6245 about Shortcuts support.

[ylluminate]

This is upsetting.