Module external_links 

Validated system-browser handoff for explicit public source links. Narrow system-browser handoff for explicit HTTP(S) source links; never a shell or filesystem opener.

Functions

browser_url

Accept bounded HTTP(S) URLs without credentials, whitespace, backslashes or nonstandard ports.

open_browser

Dispatch a user-activated source URL with fixed OS helpers and separate argv, never command interpretation. A long-running browser handler is reaped independently; success means OS handoff, not verified page load.