LBRYCommunity/lbry-desktop
1
0
Fork 0
Code Issues 596 Pull requests 6 Projects Releases 238 Packages Wiki Activity

Only allow to window.open http and https protocols.

Browse source
This commit is contained in:
Franco Montenegro 2022-02-16 19:28:21 -03:00 • committed by jessopb
parent 8fb67d5980
commit aa40a44ce3
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
electron/createWindow.js
View file

@ -191,8 +191,11 @@ export default appState => {
}); });
window.webContents.setWindowOpenHandler((details) => { window.webContents.setWindowOpenHandler((details) => {
// Open the link in a browser tab. // Only open http and https links to prevent
shell.openExternal(details.url); // security issues.
if (['https:', 'http:'].includes(new URL(details.url).protocol)) {
shell.openExternal(details.url);
}
return { action: 'deny' }; return { action: 'deny' };
}); });