d3v1l/matrixion
1
0
Fork 0
mirror of https://github.com/Nheko-Reborn/nheko.git synced 2024-11-22 11:00:48 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use allow list for URI schemes

Browse source
This commit is contained in:
Nicolas Werner 2021-10-17 17:18:02 +02:00
parent b030eb923b
commit 147dc9d4da
No known key found for this signature in database
GPG key ID: C8D75E610773F2D9
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/ui/NhekoGlobalObject.cpp
View file

@ -61,7 +61,17 @@ Nheko::openLink(QString link) const
QUrl url(link);
// Open externally if we couldn't handle it internally
if (!ChatPage::instance()->handleMatrixUri(url)) {
QDesktopServices::openUrl(url);
const QStringList allowedUrlSchemes = {
"http",
"https",
"mailto",
};
if (allowedUrlSchemes.contains(url.scheme()))
QDesktopServices::openUrl(url);
else
nhlog::ui()->warn("Url '{}' not opened, because the scheme is not in the allow list",
url.toDisplayString().toStdString());
}
}
void