Custom protocols like `mailto:` in ZIM articles are blocked in Chromium browsers

kiwix / kiwix-js-pwa

Kiwix JS Offline Browser implemented as a Progressive Web App (PWA), and packaged as Electron, NWJS and UWP apps for Windows and Linux.

https://pwa.kiwix.org

GNU General Public License v3.0

168 stars 26 forks source link

Custom protocols like `mailto:` in ZIM articles are blocked in Chromium browsers #615

Closed Jaifroid closed 1 month ago

Jaifroid commented 2 months ago

As stated in https://github.com/kiwix/libkiwix/issues/1090, the solution is to add mailto: as an exception for default-src (or frame-src if it exists) in the CSP.

Jaifroid commented 2 months ago

Changed title because we shouldn't limit this to mailto: considering we can have things like skype:, zoomus:, and an infinity of custom URI schemata. So they need to be handled generically.