Merge pull request from GHSA-mjrg-9f8r-h3m7

* Patch part 1: remove electronVersion

We no longer need to specify electronVersion at all since electron
is now in devDependencies. Removing it means electron can be updated
the same way as any other dependency.

* Only allow main app page to be opened via URL

We previously allowed any URL to be opened in the main electron
window. Allow only the main app page, as commented.

* use exact equals

* Make url logic clearer

This commit is contained in:

David Baker

2021-12-13 15:09:53 +00:00

committed by

GitHub

parent 7f292b12ea

commit b9880e2463

3 changed files with 48 additions and 28 deletions

									
										package.json
									
		-1
	
												View File
												
				@@ -83,7 +83,6 @@

				  },

				  "build": {

				    "appId": "im.riot.app",

				    "electronVersion": "13.5.1",

				    "files": [

				      "package.json",

				      {