Skip to content

fix(desktop): restrict external links - #38914

Open
opencode-agent[bot] wants to merge 1 commit into
v2from
desktop-safe-links
Open

fix(desktop): restrict external links#38914
opencode-agent[bot] wants to merge 1 commit into
v2from
desktop-safe-links

Conversation

@opencode-agent

Copy link
Copy Markdown
Contributor

Summary

  • validate renderer-provided external URLs in the main process
  • allow only HTTP and HTTPS links before calling shell.openExternal
  • reject file, executable/custom-protocol, and malformed URLs

Checks

  • bun test src/main/external-link.test.ts
  • bun typecheck

Requested by: @Brendonovich (Brendan Allan via Slack)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant