收口宿主壳外链打开协议

共享 HostBridge 契约新增外链 URL 协议白名单校验

Expo 移动壳打开外链前拒绝危险协议

Tauri 桌面壳打开外链前拒绝危险协议

补充共享契约、移动壳和桌面壳外链校验测试

更新宿主壳方案和团队共享决策记录

apps/mobile-shell/src/mobileHostBridge.ts

@@ -14,6 +14,7 @@ import {
   type HostBridgeRequest,
   type HostBridgeResponse,
   type NavigateNativePagePayload,
+  normalizeHostBridgeExternalUrl,
   type OpenExternalUrlPayload,
   type ShareOpenPayload,
 } from '../../../packages/shared/src/contracts/hostBridge';
@@ -106,9 +107,11 @@ function failure(
 }
 
 async function openExternalUrl(payload: unknown) {
-  const url = (payload as OpenExternalUrlPayload | undefined)?.url;
+  const url = normalizeHostBridgeExternalUrl(
+    (payload as OpenExternalUrlPayload | undefined)?.url,
+  );
   if (!url) {
-    throw invalidRequest('url is required');
+    throw invalidRequest('url must use an allowed external protocol');
   }
 
   await Linking.openURL(url);