electron-sandbox-boilerplate
electron-sandbox-boilerplate copied to clipboard
Start examples for Muon
Muon is an electron fork with additional security features.
I'd have to with it more but it sounds promising to say the least. There are two ways to go about it:
preload
- [ ] Check if it exposes chrome.ipcRenderer in the preload context, see what kind of evil we can do there. Perhaps has a blacklist on it already?
- [ ] If not exposed, in preload, check if we can do funky stuff with it in the unpriviliged renderer.
https://github.com/brave/muon-quick/blob/2af3358a50a5b6bf70ccb3f46997d4e75f4fc47e/main.js#L24-L26
extentensions
I've never written a chrome extension, but muon has support for it and I've been told it's the way to go.
- [ ] build one from the ground up.