Lol client executes link possible security issue

Today i got private messaged by someone from my friend list (it seems like it was actually sent by a bot) including a linked that was executed inside the league client and not in any outside internet protocol.