electron-webpack-quick-start
electron-webpack-quick-start copied to clipboard
About security and use
Hello I'm relative new in nodejs electron webpack ecosystem.
Fork your current project and try to understand all things. First I don't understandd where is the configuration files of tools used by apps like webpack conf by example.
Wanting to make a frameless app and need to use electron remote with node integration true to require BUT : As well I read this paper explain why don't give free access of nodejs tools from renderer and it's better to "compile" a preload file containing nodejs access. sanboxing etc .. : https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf
all that is described is still relevant despite the updates and how to implement these good practices ?
And final step for me is to use her tool by curiosity and one more time, try to understand :) : https://github.com/doyensec/electronegativity
Best regards