REVIEWED: OpenURL(), added some safety checks to mitigate possible malicious url inputs

This commit is contained in:
Ray 2026-07-07 11:45:30 +02:00
commit f8e42cb509
9 changed files with 106 additions and 46 deletions

View file

@ -1014,9 +1014,8 @@ double GetTime(void)
}
// Open URL with default system browser (if available)
// NOTE: This function is only safe to use if the provided URL is safe
// A user could craft a malicious string performing another action
// Avoid calling this function with user input non-validated strings
// WARNING: This function is only safe to use if you control the URL given,
// a user could craft a malicious string to perform and undesired action
void OpenURL(const char *url)
{
TRACELOG(LOG_WARNING, "OpenURL() not implemented on target platform");