REVIEWED: OpenURL(), added some safety checks to mitigate possible malicious url inputs
This commit is contained in:
parent
d631a5a466
commit
f8e42cb509
9 changed files with 106 additions and 46 deletions
|
|
@ -1014,9 +1014,8 @@ double GetTime(void)
|
|||
}
|
||||
|
||||
// Open URL with default system browser (if available)
|
||||
// NOTE: This function is only safe to use if the provided URL is safe
|
||||
// A user could craft a malicious string performing another action
|
||||
// Avoid calling this function with user input non-validated strings
|
||||
// WARNING: This function is only safe to use if you control the URL given,
|
||||
// a user could craft a malicious string to perform and undesired action
|
||||
void OpenURL(const char *url)
|
||||
{
|
||||
TRACELOG(LOG_WARNING, "OpenURL() not implemented on target platform");
|
||||
|
|
|
|||
Loading…
Reference in a new issue