Verify Glovo deep links against shipped AndroidManifest.xml - #84
Merged
Merged
Conversation
com.glovo's manifest confirms DeeplinkRoutingActivity's routing: a host-scoped glovo://open / glovoapp://open custom scheme (not a catch-all like Bolt's), plus autoVerify App Link filters for glovo.go.link, link.glovoapp.com, ufv9.adj.st, glovo.app.link/ glovo-alternate.app.link, and @string/deeplinks_web_link_host (almost certainly glovoapp.com, corroborated by another activity in the same manifest using that literal host). None of the filters declare a path constraint, so the app's current https://glovoapp.com/search/?query= guess likely reaches the app (host-verified) but its path/query contract remains unverified, unlike Bolt Food's manifest-declared /search route. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AgqVZSkwj86M7pEgGc45Jt
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
docs/DEEP_LINKS.md§5 explicitly listed getting Glovo's shippedAndroidManifest.xmlas the "highest priority follow-up" for the food-delivery deep link work — this PR does that with the manifest just provided (com.glovo, versionName2026.36.0, versionCode412660).com.glovoapp.deeplinks.DeeplinkRoutingActivity's actual intent filters: a host-scopedglovo://open/glovoapp://opencustom scheme (not a catch-all like Bolt'sbolt://), plusautoVerifyApp Link filters forglovo.go.link,link.glovoapp.com,ufv9.adj.st,glovo.app.link/glovo-alternate.app.link, and@string/deeplinks_web_link_host.deeplinks_web_link_hostis almost certainlyglovoapp.com— that literal host string appears elsewhere in the same manifest (POCustomTabRedirectActivity'spayments-redirectfilter) — since the raw string resource isn't included in a manifest teardown.path/pathPrefix, unlike Bolt Food's manifest which explicitly lists/search,/p/*, etc. So while this app's currenthttps://glovoapp.com/search/?query=<QUERY>guess is now host-verified (assuming the string resolves as expected), the/searchpath andqueryparam are still unverified guesses — the manifest doesn't confirm or rule them out.FoodDeepLinks.ktdoc comment (which said no manifest was available for Glovo) to reflect this.No behavior change —
FoodDeepLinks.createSearchLink()still builds the same URL as before; only documentation/comments were updated to reflect what's now verified vs. still guessed.Test plan
deeplinks_web_link_hostresolves toglovoapp.comand that/search/?query=actually pre-fills Glovo's search (tracked as follow-up in docs/DEEP_LINKS.md item 5).🤖 Generated with Claude Code
https://claude.ai/code/session_01AgqVZSkwj86M7pEgGc45Jt
Generated by Claude Code