phlux/mattermostest
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

[MM-20350] Block Basic auth for non trusted URLs (#1125)

Browse Source
This commit is contained in:
Devin Binnie
2020-01-09 12:37:57 -05:00
committed by Dean Whillier
parent 867380c1d4
commit 8f45afa080
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/main.js
View File

@@ -356,6 +356,9 @@ function handleAppGPUProcessCrashed(event, killed) {
function handleAppLogin(event, webContents, request, authInfo, callback) { function handleAppLogin(event, webContents, request, authInfo, callback) {
event.preventDefault(); event.preventDefault();
if (!isTrustedURL(request.url)) {
return;
}
loginCallbackMap.set(JSON.stringify(request), callback); loginCallbackMap.set(JSON.stringify(request), callback);
mainWindow.webContents.send('login-request', request, authInfo); mainWindow.webContents.send('login-request', request, authInfo);
} }