Fix URL check

electron/main.ts

@@ -269,7 +269,7 @@
       const indexPath = path.join(__dirname, "../dist/index.html")
       console.log("Falling back to:", indexPath)
       if (fs.existsSync(indexPath)) {
         state.mainWindow.loadFile(indexPath)
       } else {
         console.error("Could not find index.html in dist folder")
       }
@@ -293,11 +293,19 @@
   }
   state.mainWindow.webContents.setWindowOpenHandler(({ url }) => {
     console.log("Attempting to open URL:", url)
-    if (url.includes("google.com") || url.includes("supabase.co")) {
-      shell.openExternal(url)
-      return { action: "deny" }
+    try {
+      const parsedURL = new URL(url);
+      const hostname = parsedURL.hostname;
+      const allowedHosts = ["google.com", "supabase.co"];
+      if (allowedHosts.includes(hostname) || hostname.endsWith(".google.com") || hostname.endsWith(".supabase.co")) {
+        shell.openExternal(url);
+        return { action: "deny" }; // Do not open this URL in a new Electron window
+      }
+    } catch (error) {
+      console.error("Invalid URL %d in setWindowOpenHandler: %d" , url , error);
+      return { action: "deny" }; // Deny access as URL string is malformed or invalid
     }
-    return { action: "allow" }
+    return { action: "allow" };
   })
 
   // Enhanced screen capture resistance
@@ -382,11 +390,11 @@
 // Window visibility functions
 function hideMainWindow(): void {
   if (!state.mainWindow?.isDestroyed()) {
     const bounds = state.mainWindow.getBounds();
     state.windowPosition = { x: bounds.x, y: bounds.y };
     state.windowSize = { width: bounds.width, height: bounds.height };
     state.mainWindow.setIgnoreMouseEvents(true, { forward: true });
     state.mainWindow.setOpacity(0);
     state.isWindowVisible = false;
     console.log('Window hidden, opacity set to 0');
   }
@@ -395,17 +403,17 @@
 function showMainWindow(): void {
   if (!state.mainWindow?.isDestroyed()) {
     if (state.windowPosition && state.windowSize) {
       state.mainWindow.setBounds({
         ...state.windowPosition,
         ...state.windowSize
       });
     }
     state.mainWindow.setIgnoreMouseEvents(false);
     state.mainWindow.setAlwaysOnTop(true, "screen-saver", 1);
     state.mainWindow.setVisibleOnAllWorkspaces(true, {
       visibleOnFullScreen: true
     });
     state.mainWindow.setContentProtection(true);
     state.mainWindow.setOpacity(0); // Set opacity to 0 before showing
     state.mainWindow.showInactive(); // Use showInactive instead of show+focus
     state.mainWindow.setOpacity(1); // Then set opacity to 1 after showing