fix: limit usage of shell.openExternal to web URLs

Author: dsanders11

src/main/windows.ts

@@ -24,6 +24,11 @@ export function mainIsReady() {
   mainIsReadyResolver();
 }
 
+function isWebProtocol(url: string) {
+  const { protocol } = new URL(url);
+  return ['http', 'https'].includes(protocol);
+}
+
 /**
  * Gets default options for the main window
  *
@@ -92,13 +97,17 @@ export function createMainWindow(): Electron.BrowserWindow {
   });
 
   browserWindow.webContents.setWindowOpenHandler((details) => {
-    shell.openExternal(details.url);
+    if (isWebProtocol(details.url)) {
+      shell.openExternal(details.url);
+    }
     return { action: 'deny' };
   });
 
   browserWindow.webContents.on('will-navigate', (event, url) => {
     event.preventDefault();
-    shell.openExternal(url);
+    if (isWebProtocol(details.url)) {
+      shell.openExternal(url);
+    }
   });
 
   ipcMainManager.on(IpcEvents.RELOAD_WINDOW, () => {