1 files changed, 36 insertions, 0 deletions

diff --git a/src/helpers/url-helpers.ts b/src/helpers/url-helpers.ts
new file mode 100644
index 000000000..23e8fab29
--- /dev/null
+++ b/src/helpers/url-helpers.ts
@@ -0,0 +1,36 @@
+// This is taken from: https://benjamin-altpeter.de/shell-openexternal-dangers/
+
+import { URL } from 'url';
+import { ensureDirSync } from 'fs-extra';
+import { shell } from 'electron';
+
+import { ALLOWED_PROTOCOLS } from '../config';
+
+const debug = require('debug')('Ferdi:Helpers:url');
+
+export function isValidExternalURL(url: string) {
+  let parsedUrl: URL;
+  try {
+    parsedUrl = new URL(url);
+  } catch (_) {
+    return false;
+  }
+
+  const isAllowed = ALLOWED_PROTOCOLS.includes(parsedUrl.protocol);
+
+  debug('protocol check is', isAllowed, 'for:', url);
+
+  return isAllowed;
+}
+
+export async function openPath(folderName: string) {
+  ensureDirSync(folderName);
+  shell.openPath(folderName);
+}
+
+// TODO: Need to verify and fix/remove the skipping logic. Ideally, we should never skip this check
+export function openExternalUrl(url: string, skipValidityCheck: boolean = false) {
+  if (skipValidityCheck || isValidExternalURL(url)) {
+    shell.openExternal(url);
+  }
+}