Skip to content

openExternalURL

Client-side

Opens an approved HTTPS destination in the operating system browser without exposing arbitrary shell execution.

Syntax

bool openExternalURL(string url)

Arguments

urlstring

HTTPS URL up to 4096 characters.

Returns

true when the destination passed the permission policy and the system open request was started; false otherwise.

Ownership and lifecycle

External URLs are opened only when the HTTPS destination is allowed by the client browser-domain permission state or is a fixed first-party exception. The call creates no persistent handle.

Important behavior
  • Normal destinations must already be allowed by the client CEF domain-permission state.
  • A small immutable first-party onboarding/purchase allowlist bypasses the generic prompt; arbitrary server-provided URLs do not.

Where this comes from

RELATED SA:O APIS

Continue exploring

Read the system guide →