Share link redirects to markusfisch.de

[jfml]

Hi, I realised the following was happening only because I came across a qr code in the wild that was probably done with your app.

When scanning / creating a qr code and then not clicking the floating share / open button on the lower right but the share(?) button (that kind of looks like a link symbol?) on the top right (between the copy symbol and the hamburger dots) the content of the qr code (in the example below „jfml.eu“) gets put into a link like this:

https://markusfisch.de/encode?format=QRCode&content=jfml.eu

Which then just redirects to the main page of markusfisch.de

I can replicate this with ver. 1.73.1 from F-Droid.

Is this expected behavior? I think there are privacy implications with this because obviously you get the content of the qr code (and IP / time etc) from the people clicking on that button (or – weirdly – qr codes that somehow use this link format, I don't really understand how the person I scanned the qr code from managed to do that*) like the above.

I just saw that you can get the same behavior if you generate a qr code and then click „Copy as deep link“ via the three dots menu.

• They also don't seem to have tested this otherwise they'd have seen that the qr codes does not linke to what they intendet to.

[markusfisch]

This is indeed a Deep Link. And yes, I don’t understand why someone would encode this URI in a QR Code, too. That’s clearly not what it’s for.

On Android, Deep Links are a normal mechanism for letting another app or a website open a specific screen or action inside an installed app. In this case, the link is used to launch Binary Eye’s scan or encode feature.

The link itself is handled locally by Android and Binary Eye (if it is installed). It does not send the scanned content to me, my server, or the project. I never receive any content from it. Unless someone executes this link in a browser, or on a device without Binary Eye, for which it was never intended.