LBRYCommunity/lbry-desktop
1
0
Fork 0
Code Issues 596 Pull requests 6 Projects Releases 238 Packages Wiki Activity

Only allow to window.open http and https protocols.

Browse source
This commit is contained in:
Franco Montenegro 2022-02-16 19:28:21 -03:00 committed by jessopb
parent 8fb67d5980
commit aa40a44ce3
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
electron/createWindow.js
View file

@ -191,8 +191,11 @@ export default appState => {
});
window.webContents.setWindowOpenHandler((details) => {
// Open the link in a browser tab.
shell.openExternal(details.url);
// Only open http and https links to prevent
// security issues.
if (['https:', 'http:'].includes(new URL(details.url).protocol)) {
shell.openExternal(details.url);
}
return { action: 'deny' };
});