Workflow-aware browser security for links opened from external applications, identity flows and navigation handoffs.