Address PR comments

ElementX/Sources/Application/Navigation/AppRoutes.swift

@@ -28,7 +28,7 @@ enum AppRouteURLParser {
     private enum KnownHosts: String, CaseIterable {
         case elementIo = "element.io"
         case appElementIo = "app.element.io"
-        case statingElementIo = "staging.element.io"
+        case stagingElementIo = "staging.element.io"
         case developElementIo = "develop.element.io"
         case mobileElementIo = "mobile.element.io"
         case callElementIo = "call.element.io"
@@ -48,13 +48,8 @@ enum AppRouteURLParser {
         if host == KnownHosts.callElementIo.rawValue {
             return .genericCallLink(url: url)
         }
-
-        #warning("Remove this")
-        if host == KnownHosts.appElementIo.rawValue {
-            return .genericCallLink(url: "https://call.element.io/stefanTestsThings")
-        }
-
-        // Deep linking not supported
+
+        // Deep linking not supported at the moment
         return nil
     }
 }

ElementX/Sources/FlowCoordinators/UserSessionFlowCoordinator.swift

@@ -131,6 +131,11 @@ class UserSessionFlowCoordinator: FlowCoordinatorProtocol {
     // MARK: - Private
 
     private func clearPresentedSheets(animated: Bool, completion: @escaping () -> Void) {
+        if navigationSplitCoordinator.sheetCoordinator == nil {
+            completion()
+            return
+        }
+
         navigationSplitCoordinator.setSheetCoordinator(nil, animated: animated)
 
         // Prevents system crashes when presenting a sheet if another one was already shown

ElementX/Sources/Screens/Other/GenericCallLinkCoordinator.swift

@@ -45,18 +45,20 @@ private struct WebView: UIViewRepresentable {
     }
 
     func makeCoordinator() -> Coordinator {
-        Coordinator()
+        Coordinator(initialURL: url)
     }
 
     func updateUIView(_ webView: WKWebView, context: Context) {
         webView.load(URLRequest(url: url))
     }
 
     @MainActor
-    class Coordinator: NSObject, WKUIDelegate {
+    class Coordinator: NSObject, WKUIDelegate, WKNavigationDelegate {
+        private let initialURL: URL
         private(set) var webView: WKWebView!
 
-        override init() {
+        init(initialURL: URL) {
+            self.initialURL = initialURL
             super.init()
 
             let configuration = WKWebViewConfiguration()
@@ -71,7 +73,29 @@ private struct WebView: UIViewRepresentable {
         // MARK: - WKUIDelegate
 
         func webView(_ webView: WKWebView, decideMediaCapturePermissionsFor origin: WKSecurityOrigin, initiatedBy frame: WKFrameInfo, type: WKMediaCaptureType) async -> WKPermissionDecision {
-            .grant
+            // Don't allow permissions for domains different than what the call was started on
+            guard origin.host == initialURL.host else {
+                return .deny
+            }
+
+            return .grant
+        }
+
+        // MARK: - WKNavigationDelegate
+
+        func webView(_ webView: WKWebView, decidePolicyFor navigationAction: WKNavigationAction) async -> WKNavigationActionPolicy {
+            // Allow any content from the main URL.
+            if navigationAction.request.url?.host == initialURL.host {
+                return .allow
+            }
+
+            // Additionally allow any embedded content such as captchas.
+            if let targetFrame = navigationAction.targetFrame, !targetFrame.isMainFrame {
+                return .allow
+            }
+
+            // Otherwise the request is invalid.
+            return .cancel
         }
     }
 }