Merge pull request from GHSA-564w-97r7-c6p9

Author: wojtekmach

lib/livebook/utils.ex

@@ -307,6 +307,25 @@ defmodule Livebook.Utils do
     "data:#{mime};base64,#{data}"
   end
 
+  @doc """
+  Expands URL received from the Desktop App for opening in the browser.
+  """
+  def expand_desktop_url("") do
+    LivebookWeb.Endpoint.access_url()
+  end
+
+  def expand_desktop_url("/settings") do
+    to_string(%{LivebookWeb.Endpoint.access_struct_url() | path: "/settings"})
+  end
+
+  def expand_desktop_url("file://" <> path) do
+    notebook_open_url(path)
+  end
+
+  def expand_desktop_url("livebook://" <> rest) do
+    notebook_import_url("https://#{rest}")
+  end
+
   @doc """
   Opens the given `url` in the browser.
   """
@@ -323,10 +342,15 @@ defmodule Livebook.Utils do
 
         {:unix, _} ->
           cond do
-            System.find_executable("xdg-open") -> {"xdg-open", [url]}
+            System.find_executable("xdg-open") ->
+              {"xdg-open", [url]}
+
             # When inside WSL
-            System.find_executable("cmd.exe") -> {"cmd.exe", win_cmd_args}
-            true -> nil
+            System.find_executable("cmd.exe") ->
+              {"cmd.exe", win_cmd_args}
+
+            true ->
+              nil
           end
       end
 

lib/livebook_app.ex

@@ -18,7 +18,10 @@ if Mix.target() == :app do
 
     @impl true
     def handle_info({:event, "open", url}, state) do
-      open(url)
+      url
+      |> Livebook.Utils.expand_desktop_url()
+      |> Livebook.Utils.browser_open()
+
       {:noreply, state}
     end
 
@@ -27,31 +30,5 @@ if Mix.target() == :app do
       Livebook.Config.shutdown()
       {:noreply, state}
     end
-
-    defp open("") do
-      open(LivebookWeb.Endpoint.access_url())
-    end
-
-    defp open("file://" <> path) do
-      path
-      |> Livebook.Utils.notebook_open_url()
-      |> open()
-    end
-
-    defp open("livebook://" <> rest) do
-      "https://#{rest}"
-      |> Livebook.Utils.notebook_import_url()
-      |> open()
-    end
-
-    defp open("/settings") do
-      %{LivebookWeb.Endpoint.access_struct_url() | path: "/settings"}
-      |> to_string()
-      |> open()
-    end
-
-    defp open(url) do
-      Livebook.Utils.browser_open(url)
-    end
   end
 end