Skip to content
This repository has been archived by the owner on Oct 11, 2023. It is now read-only.

Reject non http(s) to open with shell #53

Merged
merged 1 commit into from
Jul 16, 2019
Merged

Reject non http(s) to open with shell #53

merged 1 commit into from
Jul 16, 2019

Conversation

saiya
Copy link
Contributor

@saiya saiya commented Jul 16, 2019

Reject non http(s) in shell.openExternal to make slackdeck-proto secure.

Note: Slack's official Electron app simply ignores non http(s) URL (for example, please click file://dev/null in Slack app).

Caveat: I have not tested this PR enough. Please test this before merge.

@blue0513
Copy link
Owner

Commented on #54.

I tested it and LGTM!! Thx a lot!! 👍

@blue0513 blue0513 merged commit 7093042 into blue0513:master Jul 16, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants