Fregf

FYI: the last paragraph on https://firzen.de/building-a-poc-for-cve-2021-40438 gives some info on what should be blocked.

I'm not sure. At first I thought the unix: string may also be placed before the ? , but I'm not really sure if this the correct interpretation of that...

An alternative would be to have Locale/Tasker integration, such as this plug-in for csipsimple: https://github.com/luklanis/csipsimple-plugin

Just found out that this plug-in adds this setting: https://github.com/timnolte/oidc-keycloak-sso