Zane
92 lines
1.7 KiB
TypeScript
92 lines
1.7 KiB
TypeScript
// URL protocol constants and security utilities
|
|
|
|
// Protocols for web content only (HTTP requests, browser URLs, server connections)
|
|
export const WEB_PROTOCOLS = ['http:', 'https:'];
|
|
|
|
// Protocols that should never be opened (security risk)
|
|
export const BLOCKED_PROTOCOLS = [
|
|
'file:',
|
|
'javascript:',
|
|
'data:',
|
|
'vbscript:',
|
|
'blob:',
|
|
'about:',
|
|
'chrome:',
|
|
'chrome-extension:',
|
|
];
|
|
|
|
// Protocols that are safe to open without confirmation
|
|
export const SAFE_PROTOCOLS = [
|
|
'http:',
|
|
'https:',
|
|
'mailto:',
|
|
'tel:',
|
|
'sms:',
|
|
'facetime:',
|
|
'facetime-audio:',
|
|
'slack:',
|
|
'discord:',
|
|
'tg:',
|
|
'telegram:',
|
|
'whatsapp:',
|
|
'skype:',
|
|
'msteams:',
|
|
'vscode:',
|
|
'vscode-insiders:',
|
|
'vscodium:',
|
|
'jetbrains:',
|
|
'sublime:',
|
|
'atom:',
|
|
'github-mac:',
|
|
'github-windows:',
|
|
'sourcetree:',
|
|
'cursor:',
|
|
'spotify:',
|
|
'music:',
|
|
'itmss:',
|
|
'vlc:',
|
|
'zoommtg:',
|
|
'zoomus:',
|
|
'webex:',
|
|
'meet:',
|
|
'notion:',
|
|
'obsidian:',
|
|
'bear:',
|
|
'things:',
|
|
'omnifocus:',
|
|
'todoist:',
|
|
'evernote:',
|
|
'onenote:',
|
|
'dropbox:',
|
|
'googledrive:',
|
|
'onedrive:',
|
|
'googlechrome:',
|
|
'firefox:',
|
|
'safari:',
|
|
'goose:',
|
|
];
|
|
|
|
/**
|
|
* Check if a URL uses a protocol that is safe to open without user confirmation.
|
|
* Dangerous protocols are blocked centrally in main.ts open-external handler.
|
|
*/
|
|
export const isProtocolSafe = (url: string): boolean => {
|
|
try {
|
|
const parsed = new URL(url);
|
|
return SAFE_PROTOCOLS.includes(parsed.protocol);
|
|
} catch {
|
|
return false;
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Extract the protocol from a URL string.
|
|
*/
|
|
export const getProtocol = (url: string): string | null => {
|
|
try {
|
|
return new URL(url).protocol;
|
|
} catch {
|
|
return null;
|
|
}
|
|
};
|