electron-webpack-quick-start icon indicating copy to clipboard operation
electron-webpack-quick-start copied to clipboard

About security and use

Open panpansh opened this issue 5 years ago • 0 comments

Hello I'm relative new in nodejs electron webpack ecosystem.

Fork your current project and try to understand all things. First I don't understandd where is the configuration files of tools used by apps like webpack conf by example.

Wanting to make a frameless app and need to use electron remote with node integration true to require BUT : As well I read this paper explain why don't give free access of nodejs tools from renderer and it's better to "compile" a preload file containing nodejs access. sanboxing etc .. : https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf

all that is described is still relevant despite the updates and how to implement these good practices ?

And final step for me is to use her tool by curiosity and one more time, try to understand :) : https://github.com/doyensec/electronegativity

Best regards

panpansh avatar Oct 05 '19 21:10 panpansh