fix(main) block opening any external applications

1 files changed, 14 insertions, 2 deletions

diff --git a/main.js b/main.js
index 4d71d8a..a2db555 100644
--- a/main.js
+++ b/main.js
@@ -250,7 +250,7 @@ function createJitsiMeetWindow() {
 
         if (!requestedBasename.startsWith(appBasePath)) {
             callback(false);
-            console.log(`Rejected file URL: ${details.url}`);
+            console.warn(`Rejected file URL: ${details.url}`);
 
             return;
         }
@@ -289,11 +289,23 @@ function createJitsiMeetWindow() {
         const requestedUrl = new URL.URL(url);
 
         if (!allowedRedirects.includes(requestedUrl.protocol)) {
-            console.log(`Disallowing redirect to ${url}`);
+            console.warn(`Disallowing redirect to ${url}`);
             ev.preventDefault();
         }
     });
 
+    // Block opening any external applications.
+    mainWindow.webContents.session.setPermissionRequestHandler((_, permission, callback, details) => {
+        if (permission === 'openExternal') {
+            console.warn(`Disallowing opening ${details.externalURL}`);
+            callback(false);
+
+            return;
+        }
+
+        callback(true);
+    });
+
     initPopupsConfigurationMain(mainWindow);
     setupAlwaysOnTopMain(mainWindow, null, windowOpenHandler);
     setupPowerMonitorMain(mainWindow);