mirror of
https://github.com/rhysd/Mstdn.git
synced 2025-01-21 20:52:11 +01:00
do not allow any permission by default outside current mastodon instance
This commit is contained in:
parent
0098a55e19
commit
2a65483779
@ -40,7 +40,13 @@ export default class Window {
|
|||||||
});
|
});
|
||||||
|
|
||||||
browser.webContents.session.setPermissionRequestHandler((contents, permission, callback) => {
|
browser.webContents.session.setPermissionRequestHandler((contents, permission, callback) => {
|
||||||
if (permission !== 'geolocation' && permission !== 'media') {
|
const url = contents.getURL();
|
||||||
|
const grantedByDefault =
|
||||||
|
url.startsWith(`https://${this.account.host}`) &&
|
||||||
|
permission !== 'geolocation' &&
|
||||||
|
permission !== 'media';
|
||||||
|
|
||||||
|
if (grantedByDefault) {
|
||||||
// Granted
|
// Granted
|
||||||
log.debug('Permission was granted', permission);
|
log.debug('Permission was granted', permission);
|
||||||
callback(true);
|
callback(true);
|
||||||
@ -51,7 +57,7 @@ export default class Window {
|
|||||||
dialog.showMessageBox({
|
dialog.showMessageBox({
|
||||||
type: 'question',
|
type: 'question',
|
||||||
buttons: ['Accept', 'Reject'],
|
buttons: ['Accept', 'Reject'],
|
||||||
message: `Permission '${permission}' is requested by ${contents.getURL()}`,
|
message: `Permission '${permission}' is requested by ${url}`,
|
||||||
detail: "Please choose one of 'Accept' or 'Reject'",
|
detail: "Please choose one of 'Accept' or 'Reject'",
|
||||||
}, (buttonIndex: number) => {
|
}, (buttonIndex: number) => {
|
||||||
const granted = buttonIndex === 0;
|
const granted = buttonIndex === 0;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user