electron-sandbox-boilerplate icon indicating copy to clipboard operation
electron-sandbox-boilerplate copied to clipboard

Start examples for Muon

Open kewde opened this issue 7 years ago • 0 comments

Muon is an electron fork with additional security features.

I'd have to with it more but it sounds promising to say the least. There are two ways to go about it:

preload

  • [ ] Check if it exposes chrome.ipcRenderer in the preload context, see what kind of evil we can do there. Perhaps has a blacklist on it already?
  • [ ] If not exposed, in preload, check if we can do funky stuff with it in the unpriviliged renderer.

https://github.com/brave/muon-quick/blob/2af3358a50a5b6bf70ccb3f46997d4e75f4fc47e/main.js#L24-L26

extentensions

I've never written a chrome extension, but muon has support for it and I've been told it's the way to go.

  • [ ] build one from the ground up.

kewde avatar Jan 14 '18 12:01 kewde