starred/native
1
0
Fork 0
mirror of https://github.com/bulwarkmail/native.git synced 2026-11-01 08:06:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: only open safe URL schemes from contact cards

Browse Source
This commit is contained in:
Linus Rath
2026-08-29 18:07:15 +02:00
parent 56f8dceb8f
commit 63bf3921b0
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/screens/ContactDetailScreen.tsx
+6 -1
View File
@@ -15,6 +15,7 @@ import {
Clock, KeyRound, FolderInput, Plus, Clock, KeyRound, FolderInput, Plus,
} from 'lucide-react-native'; } from 'lucide-react-native';
import type { RootStackParamList } from '../navigation/types'; import type { RootStackParamList } from '../navigation/types';
import { openExternalUrl } from '../lib/open-url';
import type { ContactCard } from '../api/types'; import type { ContactCard } from '../api/types';
import { useContactsStore } from '../stores/contacts-store'; import { useContactsStore } from '../stores/contacts-store';
import { import {
@@ -177,7 +178,11 @@ export default function ContactDetailScreen() {
Linking.openURL(`https://maps.google.com/?q=${encoded}`).catch(() => Alert.alert('Cannot open maps')); Linking.openURL(`https://maps.google.com/?q=${encoded}`).catch(() => Alert.alert('Cannot open maps'));
}; };
const openUrl = (uri: string) => { const openUrl = (uri: string) => {
Linking.openURL(uri).catch(() => Alert.alert('Cannot open link')); // Contact data is server-supplied: only hand http(s)/mailto/tel/sms/geo
// schemes to the OS, never intent:// / file:// / third-party deep links.
void openExternalUrl(uri).then((opened) => {
if (!opened) Alert.alert('Cannot open link');
});
}; };
const shareValue = (value: string) => { const shareValue = (value: string) => {
Share.share({ message: value }).catch(() => {}); Share.share({ message: value }).catch(() => {});