Function: validateExternalOpenUrlCandidate()

validateExternalOpenUrlCandidate(rawUrl: unknown): ExternalOpenUrlValidationResult

Defined in: shared/utils/urlSafety.ts:367

Validates and normalizes a URL intended to be opened via shell.openExternal.

Parameters

rawUrl

unknown

Returns

ExternalOpenUrlValidationResult

Remarks

This helper is used at multiple trust boundaries (renderer input, IPC validators, and main-process handlers). Keeping the policy here prevents subtle inconsistencies (e.g. allowing mailto: in one layer but rejecting it in another).