Link Test
Tap each. Note: no-op / chooser / direct launch.
Anchor hrefs (intent: scheme)
1. Developer options
2. Settings
3. Wi-Fi settings
4. About device
5. EngineerMode
6. Falcon InfoActivity
7. Settings (w/ fallback)
Other schemes
8. market:// (Play)
9. file:///sdcard/
10. content:// storage
11. tel: (secret-code style)
JS-initiated redirects (button → location.href)
Tests whether the WebView follows a script-driven intent (bypasses href sanitization).
Non-scheme breakouts (no URL scheme — different Android handoff)
File picker → DocumentsUI (file manager):
Print → print framework → "Save as PDF" → DocumentsUI:
Downloads (trigger WebView DownloadListener):
Download test.txt (data URI)
Long-press these (context menu → Share / Open in new tab / Download image):
Long-press this link
Select the text below, then use the selection toolbar (Share / Web search / Assist):
SELECT-ME-AND-SHARE breakout test string for the floating selection toolbar.
Web APIs that hand off without a URL scheme
navigator.share variants (watch for a chooser)
Native pickers via other Web APIs
Sensor exposure (CONFIRMED: camera works) — scope mic + location
Injected JS bridge hunt (JS → native)