Files
jitsi-meet/react/features/base/util/openURLInBrowser.web.ts
Horatiu Muresan f1339644b0 fix(url-params) Sanitize url params (#17070)
- check the passed lang param is in allowed languages
- validate http/https on deployment URLs
2026-03-03 13:28:53 +02:00

31 lines
695 B
TypeScript

import logger from './logger';
/**
* Opens URL in the browser.
*
* @param {string} url - The URL to be opened.
* @param {boolean} openInNewTab - If the link should be opened in a new tab.
* @returns {void}
*/
export function openURLInBrowser(url: string, openInNewTab?: boolean) {
let parsed;
try {
parsed = new URL(url);
} catch {
logger.warn(`Blocked invalid URL: ${url}`);
return;
}
if (![ 'http:', 'https:' ].includes(parsed.protocol)) {
logger.warn(`Blocked URL with disallowed protocol: ${parsed.protocol}`);
return;
}
const target = openInNewTab ? '_blank' : '';
window.open(url, target, 'noopener');
}