Details
-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
0.10
-
None
-
Unknown
-
Description
In electron, some security restrictions are applied (see https://github.com/xwiki-contrib/cristal/blob/main/electron/main/src/security-restrictions.ts#L37) to prevent users to navigate to unknown locations.
But, navigating to some locations should be allowed. For instance, for authentication.
Therefore, we need to allow configurations to "inject" allowed url to customize the security restrictions.