Skip to content

About security and use #67

Open
Open
@panpansh

Description

@panpansh

Hello I'm relative new in nodejs electron webpack ecosystem.

Fork your current project and try to understand all things.
First I don't understandd where is the configuration files of tools used by apps like webpack conf by example.

Wanting to make a frameless app and need to use electron remote with node integration true to require BUT :
As well I read this paper explain why don't give free access of nodejs tools from renderer and it's better to "compile" a preload file containing nodejs access. sanboxing etc .. : https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf

all that is described is still relevant despite the updates and how to implement these good practices ?

And final step for me is to use her tool by curiosity and one more time, try to understand :) : https://github.com/doyensec/electronegativity

Best regards

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions