Clarification
>I will humbly suggest one difference between scanning and typing. You know what you are typing in
Sorry, I wasn't clear enough. It is different to the user, but as far as a computer or smartdevice is concerned, it is the same thing. You're basically getting a string of characters from the decode, making any kind of automated screening particularly difficult.
And I agree, giving a user preview and asking for confirmation is a very good idea. You also have to consider the possibility of incorrect decodes due to badly-printed or damaged barcodes (even with the error-checking built in to certain symbologies) as opposed to the case of someone deliberately encoding a malicious URL.
