mirror of
https://github.com/Foundry376/Mailspring.git
synced 2025-01-04 07:10:06 +08:00
💌 A beautiful, fast and fully open source mail client for Mac, Windows and Linux.
06a1eb42b2
Summary: Fixes T3252 When links were clicked with malformed, relative, or malicious href links we'd perform default behavior instead of catching them. If you have href="www.foo.bar" the browser by default thinks it's a relative link. In our case it would prepend the full default base URI which is file://path/to/edgehill. This would at best fail to do anything and at worst execute an arbitrary file. We now blacklist `file:` and check for the existence of a valid RFC 3986 schema on the URI. Test Plan: manual Reviewers: bengotow Reviewed By: bengotow Maniphest Tasks: T3252 Differential Revision: https://phab.nylas.com/D1888 |
||
---|---|---|
apm | ||
arclib | ||
build | ||
docs-templates | ||
dot-nylas | ||
exports | ||
internal_packages | ||
keymaps | ||
menus | ||
script | ||
spec | ||
spec-nylas | ||
src | ||
static | ||
vendor | ||
.arcconfig | ||
.arclint | ||
.gitattributes | ||
.gitignore | ||
.gitmodules | ||
.node-version | ||
atom.sh | ||
coffeelint.json | ||
LICENSE.md | ||
package.json | ||
README.md |
Nylas Mail is a hackable platform for your personal data, built on Electron and the Nylas Platform APIs.
Building Nylas Mail
Extending Nylas Mail
It's easy to extend Nylas Mail using your favorite web technologies. Check out the Nylas Package API to get started, and the API reference for information about specific classes.