iOS with Uber installed: this opens the app webview on this page.
The page has no address bar there. Deep link:
uber://webauth?url=https%3A%2F%2Fuber-poc.ommateum.ninja%2F
Share
Send this to a friend with the Uber app to share the voucher.
In-webview uber:// taps are handed to the app router by the
app's own webview policy (audit §7). Pending device check.
Environment (cloak check)
pending device
The app may override the webview user agent. This row is the
raw user agent, so a device pass can fix the check.
View picked
User agent
webkit.messageHandlers present
URL the app loaded
pending device
Full request URL. Any parameter the app appends shows here.
location.href
Native bridge channels
pending device
Keys of window.webkit.messageHandlers, read on load and on
demand. The Presidio channel name is runtime config, not a binary constant
(audit §12a), so enumeration is the honest probe. Nothing is ever posted
to any channel.
not scanned
__viewdebugger_bridge (EP-5)
Presidio probe (EP-2)
pending device
Presence only, read-only. Bridge names from audit §1 and §9,
checked at window.presidio and at window level.
not scanned
Native → page pushes (passive tap)
pending device
presidio.bridge.postMessage is wrapped before first paint.
Every native push is logged below. The handshake should carry bundle
identifier, device model and OS version (audit §12a). That capture is the
EP-2 device evidence. Hooks installed: none yet.