Instagram IAB
Escape Lab

01WEB

Normal HTTPS anchor

<a href>

Expected: ordinary navigation, probably inside Instagram’s current webview.

Run normal anchor ↗

02WEB

New browsing context

<a target="_blank">

Expected: new IAB view or tab; some hosts may hand this to the system browser.

Run target blank ↗

03JS

Scripted new window

window.open(url, "_blank")

Expected: new IAB context, external tab, or a popup block.

Run window.open ↗

04JS

Set location href

location.href = url

Expected: same-view navigation, usually retained inside the IAB.

Run location.href →

05JS

Assign location

location.assign(url)

Expected: same-view navigation with this page left in browser history.

Run location.assign →

06IG · iOS

Instagram external-browser anchor

<a href="instagram://extbrowser…">

Expected: Instagram may close its webview and ask iOS to open the default browser.

Run extbrowser anchor ↗

07IG · iOS

Instagram scripted handoff

location.href = instagram://…

Expected: may hand off while the tap gesture is live; recent reports conflict.

Run scripted extbrowser ↗

08IG · iOS

Instagram meta refresh

meta http-equiv="refresh"

Expected: dynamically inserts a declarative refresh; reported to pass some Meta webview filters.

Run meta refresh ↗

09iOS

Safari scheme anchor

<a href="x-safari-https://…">

Expected: may force Safari, though Meta webviews increasingly suppress it.

Run Safari anchor ↗

10iOS

Safari scripted handoff

location.href = x-safari-https://…

Expected: Safari prompt or silent rejection depending on Instagram version.

Run scripted Safari ↗

11Android

Chrome package intent

intent://…package=com.android.chrome

Expected: Android “leaving app” prompt, then Chrome; HTTPS fallback if unavailable.

Run Chrome intent ↗

12IG · iOS

Delayed Instagram handoff

setTimeout(…, 500)

Expected: likely blocked if Instagram requires the synchronous user gesture.

Run after 500 ms ⏱

13IG · iOSADDED

Replace with Instagram handoff

location.replace(instagram://…)

Expected: a reported extbrowser variant that does not retain the lab in history.

Run location.replace ↗

14iOSADDED

Chrome for iOS anchor

<a href="googlechromes://…">

Expected: opens Chrome if installed; may show a confirmation or be blocked by Instagram.

Run Chrome iOS anchor ↗

15iOSADDED

Chrome for iOS scripted

location.href = googlechromes://…

Expected: tests whether a live tap can launch installed Chrome from the webview.

Run scripted Chrome ↗

16AndroidADDED

Default-browser Android intent

intent://…action=VIEW

Expected: lets Android resolve the default browser instead of forcing Chrome.

Run default intent ↗

17OSADDED

System share sheet

navigator.share({ url })

Expected: manual OS handoff; choose a browser or copy/open action if the share sheet offers one.

Open share sheet ↑