51 lines
1.6 KiB
Rust
51 lines
1.6 KiB
Rust
//! Tauri command for opening vetted external URLs in the system browser.
|
|
|
|
use tauri_plugin_shell::ShellExt;
|
|
|
|
// Keep in sync with console/src/utils/openExternalLink.ts.
|
|
const SUPPORTED_EXTERNAL_PREFIXES: [&str; 4] = ["http://", "https://", "mailto:", "tel:"];
|
|
|
|
/// Validate and open an external URL through the OS shell.
|
|
#[tauri::command]
|
|
pub(crate) fn open_external_link(app: tauri::AppHandle, url: String) -> Result<(), String> {
|
|
if let Err(err) = validate_external_url(&url) {
|
|
log::warn!("[external-link] command rejected: {err}");
|
|
return Err(err);
|
|
}
|
|
|
|
#[allow(deprecated)]
|
|
let open_result = app.shell().open(url.clone(), None);
|
|
|
|
match open_result {
|
|
Ok(()) => Ok(()),
|
|
Err(err) => {
|
|
log::warn!("[external-link] open failed: {err}");
|
|
Err(err.to_string())
|
|
}
|
|
}
|
|
}
|
|
|
|
/// Reject empty, ambiguous, or unsupported URL inputs before calling shell.open.
|
|
fn validate_external_url(url: &str) -> Result<(), String> {
|
|
let trimmed_url = url.trim();
|
|
if trimmed_url.is_empty() {
|
|
return Err("external link is empty".into());
|
|
}
|
|
if trimmed_url != url {
|
|
return Err("external link has leading or trailing whitespace".into());
|
|
}
|
|
if trimmed_url.chars().any(char::is_control) {
|
|
return Err("external link contains control characters".into());
|
|
}
|
|
|
|
let lowercase_url = trimmed_url.to_ascii_lowercase();
|
|
if SUPPORTED_EXTERNAL_PREFIXES
|
|
.iter()
|
|
.any(|prefix| lowercase_url.starts_with(prefix))
|
|
{
|
|
return Ok(());
|
|
}
|
|
|
|
Err("external link protocol is not supported".into())
|
|
}
|