From 6e5531ae16d69087856ce7f174ba465bc759394c Mon Sep 17 00:00:00 2001
From: Stefan Malzner <stefan@adlk.io>
Date: Tue, 5 Mar 2019 16:20:40 +0100
Subject: feat(App): Add security checks for external URLs

---
 src/config.js | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'src/config.js')

diff --git a/src/config.js b/src/config.js
index a782ad667..479572edb 100644
--- a/src/config.js
+++ b/src/config.js
@@ -62,3 +62,9 @@ export const SETTINGS_PATH = path.join(app.getPath('userData'), 'config');
 
 // Replacing app.asar is not beautiful but unforunately necessary
 export const DICTIONARY_PATH = asarPath(path.join(__dirname, 'dictionaries'));
+
+export const ALLOWED_PROTOCOLS = [
+  'https:',
+  'http:',
+  'ftp:',
+];
-- 
cgit v1.2.3-54-g00ecf