-
-
Notifications
You must be signed in to change notification settings - Fork 434
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Opening external url #3758
Comments
Huge security risk. This should never be introduced |
Unless we do the same what discord does: dialog for the user to either accept it or refuse it |
I don't think so, if user need to accept it like requestBrowserDomains() |
True. We'll need to make sure to display the entire URL, and a clear warning that it can be dangerous.
Combination between this and Tracer's proposal perhaps. Although the dialog Tracer proposes should be sufficient. Whitelisting an entire domain, and then just letting it happen at any point thereafter would still be a bad idea. |
This was requested before... i hope this time we actually allow it we just need to prompt the user before opening the url is not that problematic |
The web is full of url redirects. I think having this with a prompt before opening the url is more than enough |
Related to previously rejected feature: #2409 |
Skill issue, add prompt showned every time you try do this + require first to add url to whitelist. - discord can do this, you can too And whitelist should be per server ( downloaded resources too ) because of https://developer.chrome.com/blog/http-cache-partitioning?hl=en The same should apply for my pr with drag and drop onto mta window, add prompt, configuration ( by default disabled ). If someone is stupid he get hacked like recently i even reported server to hosting provider due to owner stupidity. I would personally use it to open website to documentation of my server AND ALSO, if we talking about security risk, why noobody over the years configured some tool to find memory leak, to find where mta write/read outside buffers? |
Closed in #2409 |
Is your feature request related to a problem? Please describe.
A function to open an URL in external browser.
When function is called, MTA goes automatically minimized and URL should open in default browser
Describe the solution you'd like
Describe alternatives you've considered
No response
Additional context
No response
Security Policy
The text was updated successfully, but these errors were encountered: