Add portable Windows desktop downloads and release uploads

tests/desktop.test.ts

@@ -0,0 +1,33 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const { isInternal, isExternal } = require("../desktop/navigation.cjs");
+
+test("desktop navigation confines remote content to the production origin", () => {
+  assert.equal(isInternal("https://minegeo.vercel.app/play?map=1"), true);
+  for (const url of [
+    "http://minegeo.vercel.app",
+    "https://minegeo.vercel.app.evil.test",
+    "https://minegeo.vercel.app@evil.test",
+    "file:///C:/Windows",
+    "javascript:alert(1)",
+    "not a URL",
+  ]) {
+    assert.equal(isInternal(url), false, url);
+  }
+});
+
+test("desktop only opens credential-free HTTPS links in external apps", () => {
+  assert.equal(isExternal("https://discord.com/invite/example"), true);
+  for (const url of [
+    "file:///C:/Windows",
+    "javascript:alert(1)",
+    "ms-settings:windowsupdate",
+    "http://example.com",
+    "https://user:password@example.com",
+    "not a URL",
+  ]) {
+    assert.equal(isExternal(url), false, url);
+  }
+});