Sandbox leaks

[raven9nine]

Links to domains or subdomaims that have not been explicitly enabled in the webapp automatically open in the default browser without even asking.

[ltguillaume]

Yeah, a dialog with the full URL to confirm opening it with the default browser would definitely be cool. For now, I just refrain from setting a default browser, so at least I get an "Open with" dialog beforehand. Alternatively, you could try out UntrackMe or LinkEye (F-Droid store).