export function openExternalLink(link) {
    let u;

    try {
        u = url.parse(link);
    } catch (e) {
        return;
    }

    if (protocolRegex.test(u.protocol)) {
        shell.openExternal(link);
    }
}
The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.