objectId in share location can be set to open arbitrary URL or Deeplinks

Summary: The NextCloud Talk app allows a user to share their location in the Mobile App. The objectId= in Can be set to a URL or Deeplink, While the will render the map, Once a user clicked the map it will open the defined URL or Deeplink in the crafted request.

For days, I've been thinking and trying different ways to Increase its Severity but i guess im stuck so here i am Reporting this.




## Steps To Reproduce:
Note: Location Sharing is only allowed in the Mobile App.

* 1.) Using the app share your location and Intercept it, The request should be …