kodev-org
/
vikunja
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(desktop): block same-window navigation to external origins

This commit is contained in:
kolaente 2026-03-20 10:06:48 +01:00 committed by kolaente
parent b9d4d5e4ac
commit 82c24a826a
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
desktop/main.js
View File

@ -40,6 +40,17 @@ function createWindow() {
return { action: 'deny' };
});
// Prevent same-window navigation to external origins.
// Only allow navigation to the local express server.
mainWindow.webContents.on('will-navigate', (event, navigationUrl) => {
const parsedUrl = new URL(navigationUrl);
// Allow navigations to the local express server
if (parsedUrl.hostname === '127.0.0.1' || parsedUrl.hostname === 'localhost') {
return;
}
event.preventDefault();
});
// Hide the toolbar
mainWindow.setMenuBarVisibility(false)