Jayden/AFFiNE-Mirror
0
0
Fork 0
mirror of https://github.com/toeverything/AFFiNE.git synced 2026-08-18 18:41:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: a security issue related to open external (#13864)

Browse Source
This commit is contained in:
Peng Xiao
2025-11-06 20:54:25 +08:00
committed by GitHub
parent dd676611ce
commit c9a4129a3e
7 changed files with 133 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/frontend/apps/electron/src/main/ui/handlers.ts
+3 -2
View File
@@ -1,9 +1,10 @@
import { app, clipboard, nativeImage, nativeTheme, shell } from 'electron';
import { app, clipboard, nativeImage, nativeTheme } from 'electron';
import { getLinkPreview } from 'link-preview-js';
import { isMacOS } from '../../shared/utils';
import { persistentConfig } from '../config-storage/persist';
import { logger } from '../logger';
import { openExternalSafely } from '../security/open-external';
import type { WorkbenchViewMeta } from '../shared-state-schema';
import type { NamespaceHandlers } from '../type';
import {
@@ -151,7 +152,7 @@ export const uiHandlers = {
}
},
openExternal(_, url: string) {
return shell.openExternal(url);
return openExternalSafely(url);
},
// tab handlers