Mojira Archive
MC-272317

Client does not check URL scheme before opening server links

Server links should only open http(s) links. Currently, it is possible to use other schemes (like file:// to open local files), which probably shouldn't be possible

Steps to reproduce:

  • Download the server jar
  • Set `bug-report-link` to a `file://` url 
  • Start the server and join
  • Click the 'Report server Bug' button
  • The local file described by the url will be opened in the default application

 

 

Fixed

Kurt Thiemann

[Mojang] Bartosz Bok

2024-05-22, 03:12 PM

2024-05-28, 08:31 AM

2024-05-28, 08:31 AM

2

3

Confirmed

Very Important

Platform

Networking

24w21a

1.21 Pre-Release 1