enforce loading urls to https only

This commit is contained in:
Vishwas Shashidhar 2018-03-29 15:54:42 +05:30
parent 923bd3ba1a
commit 2f38ea0049
2 changed files with 12 additions and 6 deletions

View File

@ -306,7 +306,7 @@ function createWin(urlFromConfig) {
// add https protocol if none found.
let parsedUrl = nodeURL.parse(urlFromConfig);
if (!parsedUrl.protocol) {
if (!parsedUrl.protocol || parsedUrl.protocol !== 'https') {
parsedUrl.protocol = 'https:';
parsedUrl.slashes = true
}

View File

@ -76,11 +76,17 @@ function removeWindowKey(key) {
/**
* Gets the parsed url
* @param url
* @returns {Url}
* @returns {String}
* @param appUrl
*/
function getParsedUrl(url) {
return nodeURL.parse(url);
function getParsedUrl(appUrl) {
let parsedUrl = nodeURL.parse(appUrl);
if (!parsedUrl.protocol || parsedUrl.protocol !== 'https') {
parsedUrl.protocol = 'https:';
parsedUrl.slashes = true
}
let url = nodeURL.format(parsedUrl);
return url;
}
/**
@ -330,7 +336,7 @@ function doCreateMainWindow(initialUrl, initialBounds, isCustomTitleBar) {
mainWindow.webContents.on('new-window', handleNewWindow);
function handleNewWindow(event, newWinUrl, frameName, disposition, newWinOptions) {
let newWinParsedUrl = getParsedUrl(newWinUrl);
let mainWinParsedUrl = getParsedUrl(url);