fix: Open redirect URL if not a web-based scheme

Author: henry-cooper-primer

Sources/PrimerSDK/Classes/Extensions & Utilities/URL.swift

@@ -0,0 +1,7 @@
+import Foundation
+
+extension URL {
+    var hasWebBasedScheme: Bool {
+        ["http", "https"].contains(scheme?.lowercased() ?? "")
+    }
+}

Sources/PrimerSDK/Classes/User Interface/TokenizationViewModels/WebRedirectPaymentMethodTokenizationViewModel.swift

@@ -148,6 +148,14 @@ class WebRedirectPaymentMethodTokenizationViewModel: PaymentMethodTokenizationVi
 
     @MainActor
     override func presentPaymentMethodUserInterface() async throws {
+        guard redirectUrl.hasWebBasedScheme else {
+            if UIApplication.shared.canOpenURL(redirectUrl) {
+                return UIApplication.shared.open(redirectUrl)
+            } else {
+                throw handled(primerError: .invalidUrl(url: redirectUrl.absoluteString))
+            }
+        }
+        
         let safariViewController = SFSafariViewController(url: redirectUrl)
         safariViewController.delegate = self
         webViewController = safariViewController