github-starred/vikunja
2
0
Fork 0
mirror of https://github.com/go-vikunja/vikunja.git synced 2026-07-10 16:44:26 -05:00
Code Issues 690 Packages Projects Releases 11 Wiki Activity

fix(desktop): block same-window navigation to external origins

Browse Source
This commit is contained in:
kolaente
2026-03-20 10:06:48 +01:00
committed by kolaente
parent b9d4d5e4ac
commit 82c24a826a
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
desktop/main.js
View File

@@ -40,6 +40,17 @@ function createWindow() {
return { action: 'deny' };
});
// Prevent same-window navigation to external origins.
// Only allow navigation to the local express server.
mainWindow.webContents.on('will-navigate', (event, navigationUrl) => {
const parsedUrl = new URL(navigationUrl);
// Allow navigations to the local express server
if (parsedUrl.hostname === '127.0.0.1' || parsedUrl.hostname === 'localhost') {
return;
}
event.preventDefault();
});
// Hide the toolbar
mainWindow.setMenuBarVisibility(false)