electron-sandbox-boilerplate

electron-sandbox-boilerplate copied to clipboard

Sandbox-preload-extended Broken on latest Electron

5

Sandbox-preload-extended uses a preload script to attach functions to window. This no longer works in the latest Electron versions (at least >= 1.8) when you have either sandbox: true or...

drewwiens

Prefix channels instead of hardcoding them?

1

First of all, thanks for this repo, it helped me wrap my head around preload.js scripts and such. Now, my question. In `preload-simple.js`, it is written that you should always...

Natrium729

https://github.com/electron/electron/pull/13028

yourfreelance-editor

sand-box-preload-extended is failing

11

This is on linux x64. `npm install` into fresh clone brought electron v.1.8.2. Clicking on a button produces error in dev-tools: ``` Uncaught TypeError: Cannot read property 'sendSync' of undefined...

3n-mb

Track: packaging distributions with --enable-sandbox

2

Currently electron-builder does not support building with sandbox mode. This tutorial would be a bit of a shame if people ended up packing their electron apps and not enabling the...

kewde

Odd muon stuff is odd.. ``` user@host:~/projects/electron/electron-sandbox/muon-preload-extended$ ps aux | grep "brave" user 10703 5.6 6.0 1084168 90148 pts/1 Sl+ 20:19 0:00 /home/user/projects/electron/brave --enable-sandbox ./electron/main.js user 10705 0.3 2.0 309504...

kewde

Experimental feature: require = null in preload

1

I've added an experimental feature to the preload script that will set require() = null after it's done importing. Feedback? https://github.com/kewde/electron-sandbox-boilerplate/blob/401b293066aeb185741852f059cdf0a46e70f1bf/sandbox-preload-extended/electron/renderer/preload-extended.js#L13-L23 What I hope it will achieve: disallow the loading...

kewde

Muon is an electron fork with additional security features. I'd have to with it more but it sounds promising to say the least. There are two ways to go about...

kewde

Standardize output into something more useful

1

Currently the output (in the alerts) is a bit of garbage that I created to quickly test this. Someone should look into organizing that.

kewde

Bumps [qs](https://github.com/ljharb/qs) from 6.5.1 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge`: avoid a crash with a null target and a truthy...

dependabot[bot]