Homepage url validation for extension listing

src/extensibility/ExtensionManagerView.js

@@ -22,7 +22,7 @@
  */
 
 /*jslint vars: true, plusplus: true, devel: true, nomen: true, indent: 4, maxerr: 50, regexp: true */
-/*global define, $, brackets */
+/*global define, $, brackets, Mustache, PathUtils */
 /*unittests: ExtensionManager*/
 
 define(function (require, exports, module) {
@@ -35,6 +35,7 @@ define(function (require, exports, module) {
         registry_utils            = require("extensibility/registry_utils"),
         InstallExtensionDialog    = require("extensibility/InstallExtensionDialog"),
         LocalizationUtils         = require("utils/LocalizationUtils"),
+        LanguageManager           = require("language/LanguageManager"),
         itemTemplate              = require("text!htmlContent/extension-manager-view-item.html"),
         Mustache                  = require("thirdparty/mustache/mustache");
 
@@ -337,6 +338,25 @@ define(function (require, exports, module) {
             context[helper] = registry_utils[helper];
         });
 
+        // Do some extra validation on homepage url to make sure we don't end up executing local binary
+        if (context.metadata.homepage) {
+            var parsed = PathUtils.parseUrl(context.metadata.homepage);
+
+            // We can't rely on path-utils because of known problems with protocol identification
+            // Falling back to Browsers protocol identification mechanism
+            var tmpLink = document.createElement('a');
+            tmpLink.href = context.metadata.homepage;
+
+            // Check if the homepage refers to a local resource
+            if (tmpLink.protocol === "file:") {
+                var language = LanguageManager.getLanguageForExtension(parsed.filenameExtension.replace(/^\./, ''));
+                // If identified language for the local resource is binary, don't list it
+                if (language && language.isBinary()) {
+                    delete context.metadata.homepage;
+                }
+            }
+        }
+
         return $(this._itemTemplate(context));
     };
 

src/nls/bg/strings.js

@@ -783,4 +783,4 @@ define({
     "DESCRIPTION_INDENT_LINE_COMMENT"                : "Задайте true за включване на отстъпа на коментарите за ред"
 });
 
-/* Last translated for a505026d40a4eb0bffc196eda30557c0e6b021bc */
+/* Last translated for a505026d40a4eb0bffc196eda30557c0e6b021bc */