openurl is a Node.js module for opening a URL via the operating system. This will usually trigger actions such as: http URLs: open the default browser mailto URLs: open the default email client file ...

window.open is called unconditionally with the agent-supplied args.url value. No scheme allowlist or blocklist is applied. Insufficient schema validation ...

0.9.0, 0.9.1, 0.9.2, 0.10.0, 0.10.1 ...