History

possible fix for openUrl exploit

SamGondelman committed 7 years ago

Commit 31b3f0e1 parent 50583d311 files · +50 −32Browse files

Showing the changes to interface/src/scripting/WindowScriptingInterface.h (1 of 11 files). Show all

Unified · Split

interface/src/scripting/WindowScriptingInterface.h+4−3
@@ -535,9 +535,10 @@ public slots: · 534 unmodified lines
535535 int openMessageBox(QString title, QString text, int buttons, int defaultButton);
536536
537537 /**jsdoc
538− * Open a URL in the Interface window or other application, depending on the URL's scheme. If the URL starts with
539− * <code>hifi://</code> then that URL is navigated to in Interface, otherwise the URL is opened in the application the OS
540− * associates with the URL's scheme (e.g., a Web browser for <code>http://</code>).
538+ * Open a URL in the Interface window or other application, depending on the URL's scheme. The following schemes are supported:
539+ * <code>hifi</code> (navigate to the URL in Interface), <code>hifiapp<code> (open a system app in Interface). Other schemes will either be handled by the OS
540+ * (e.g. <code>http</code>, <code>https</code>, <code>mailto</code>) or will create a confirmation dialog asking the user to confirm that they want to try to open
541+ * the URL.
541542 * @function Window.openUrl
542543 * @param {string} url - The URL to open.
543544 */

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t