From c35a18c2e845cd3259a6be335f1bc5694b5b648c Mon Sep 17 00:00:00 2001
From: Romaric Mourgues <rmourgues@linagora.com>
Date: Wed, 5 Apr 2023 15:43:53 +0200
Subject: [PATCH] Update display.tsx

---
 twake/frontend/src/app/views/client/viewer/link/display.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/twake/frontend/src/app/views/client/viewer/link/display.tsx b/twake/frontend/src/app/views/client/viewer/link/display.tsx
index 4a15df57..16be26bf 100644
--- a/twake/frontend/src/app/views/client/viewer/link/display.tsx
+++ b/twake/frontend/src/app/views/client/viewer/link/display.tsx
@@ -20,6 +20,7 @@ export default (props: { download: string; name: string }) => {
           const result = reader.result as string;
           const link = result.match(/URL=(.*)/);
           if (link && link[1]) {
+            if (!link[1].match(/^(http|https):\/\//)) throw new Error('Invalid link');
             window.open(link[1], '_blank');
           } else {
             setError(true);