fix(main) filter redirect protocols

1 files changed, 18 insertions, 0 deletions

diff --git a/main.js b/main.js
index b4c5c56..4d71d8a 100644
--- a/main.js
+++ b/main.js
@@ -250,6 +250,7 @@ function createJitsiMeetWindow() {
 
         if (!requestedBasename.startsWith(appBasePath)) {
             callback(false);
+            console.log(`Rejected file URL: ${details.url}`);
 
             return;
         }
@@ -276,6 +277,23 @@ function createJitsiMeetWindow() {
         });
     });
 
+    // Block redirects.
+    const allowedRedirects = [
+        'http:',
+        'https:',
+        'ws:',
+        'wss:'
+    ];
+
+    mainWindow.webContents.addListener('will-redirect', (ev, url) => {
+        const requestedUrl = new URL.URL(url);
+
+        if (!allowedRedirects.includes(requestedUrl.protocol)) {
+            console.log(`Disallowing redirect to ${url}`);
+            ev.preventDefault();
+        }
+    });
+
     initPopupsConfigurationMain(mainWindow);
     setupAlwaysOnTopMain(mainWindow, null, windowOpenHandler);
     setupPowerMonitorMain(mainWindow);