{"version":"2.1.178","anchor":"hyperlink-scheme-allowlist","canonical_anchor":"hyperlink-scheme-allowlist","heading":"Hyperlink Scheme Allowlist","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.178\/e\/hyperlink-scheme-allowlist","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.178","markdown":"### Hyperlink Scheme Allowlist\n\n**What**\n\nClickable hyperlinks in the UI are now filtered through a scheme allowlist. Links with non-allowlisted schemes are silently rejected rather than dispatched.\n\n**Details**\n\n- Allowed schemes: `https:`, `http:`, `vscode:`, `vscode-insiders:`, `cursor:`, `windsurf:`, `zed:`, `jetbrains:`, `idea:`, `slack:`, `linear:`, `notion:`, `figma:`\n- Non-allowlisted schemes produce a warning log: \"[hyperlink] refusing to dispatch clicked link with non-allowlisted scheme\"\n- `file:` URLs are allowed but resolve to local filesystem paths only\n\n**Evidence**\n\nAllowlist constant (search for `\"[hyperlink] refusing to dispatch clicked link with non-allowlisted scheme\"`, `\"windsurf:\"`, `\"figma:\"`)"}