Open
Description
Leaving this as a guide for the next soul trying it.
const URLS_ALLOWED = [
"https://stately.ai/inspect",
"https://stately.ai/registry/inspect",
"http://localhost",
];
const DOMAINS_ALLOW_LIST = ["localhost"];
applicationWindow.webContents.setWindowOpenHandler((event: any) => {
const info = new URL(event.url);
if (!URLS_ALLOWED.includes(event.url)) {
if (!DOMAINS_ALLOW_LIST.includes(info.hostname)) {
logger.error("Security issue - attempt to open a domain that is not allowed", info);
return { action: "deny" };
}
}
return { action: "allow" };
});
Metadata
Metadata
Assignees
Labels
No labels