Skip to content

[security] Do not expose Electron APIs to untrusted web content #24

@antarasi

Description

@antarasi

Describe the bug

As per the electron docs: https://www.electronjs.org/docs/latest/tutorial/security#20-do-not-expose-electron-apis-to-untrusted-web-content

What's the problem?

The ipcRenderer.on method allows the renderer process to access IpcRendererEvent which is the first argument of the listener/callback

on(channel, listener) {
      ipcRenderer.on(channel, listener)
      return () => {
        ipcRenderer.removeListener(channel, listener)
      }
  },

Electron-Toolkit Version

v1.0.0 - preload 3.0.2

Electron Version

v37

Validations

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions