Disclosure: Covert Web-to-App Tracking via Localhost on Android (localmess.github.io)
Posted today security privacy notes