kittyfangs
/
fchat-rising
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Spelled out more limitations to the webview

This commit is contained in:
Mr. Stallion 2020-06-28 17:12:32 -05:00
parent 8d3551f91b
commit 4ace1d4b32
3 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -6,7 +6,9 @@
Reviewed security with: Reviewed security with:
* [Electron Security](https://www.electronjs.org/docs/tutorial/security) * [Electron Security](https://www.electronjs.org/docs/tutorial/security)
* [Doyensec Electron Security Checklist](https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf) * [Doyensec Electron Security Checklist](https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf)
* [Doyensec Electronegativity](https://github.com/doyensec/electronegativity)
* [Quasar Electron Security Concerns](https://quasar.dev/quasar-cli/developing-electron-apps/electron-security-concerns) * [Quasar Electron Security Concerns](https://quasar.dev/quasar-cli/developing-electron-apps/electron-security-concerns)
* [Reasonably Secure Electron](https://know.bishopfox.com/research/reasonably-secure-electron)
* [SNYK.io](https://snyk.io/) vulnerability scan [![Known Vulnerabilities](https://snyk.io/test/github/mrstallion/fchat-rising/badge.svg)](https://snyk.io/test/github/mrstallion/fchat-rising) * [SNYK.io](https://snyk.io/) vulnerability scan [![Known Vulnerabilities](https://snyk.io/test/github/mrstallion/fchat-rising/badge.svg)](https://snyk.io/test/github/mrstallion/fchat-rising)

2
chat/preview/ImagePreview.vue
View File

@ -13,7 +13,7 @@
<webview <webview
preload="./preview/assets/browser.pre.js" preload="./preview/assets/browser.pre.js"
src="about:blank" src="about:blank"
webpreferences="autoplayPolicy=no-user-gesture-required,contextIsolation,sandbox,disableDialogs,disableHtmlFullScreenWindowResize,enableWebSQL=no,nodeIntegration=no" webpreferences="autoplayPolicy=no-user-gesture-required,contextIsolation,sandbox,disableDialogs,disableHtmlFullScreenWindowResize,webSecurity,enableWebSQL=no,nodeIntegration=no,nativeWindowOpen=no,nodeIntegrationInWorker=no,nodeIntegrationInSubFrames=no,webviewTag=no"
enableremotemodule="false" enableremotemodule="false"
allowpopups="false" allowpopups="false"
nodeIntegration="false" nodeIntegration="false"

1
electron/main.ts
View File

@ -290,6 +290,7 @@ function showPatchNotes(): void {
electron.shell.openExternal('https://github.com/mrstallion/fchat-rising/blob/master/CHANGELOG.md'); //tslint:disable-line:no-floating-promises electron.shell.openExternal('https://github.com/mrstallion/fchat-rising/blob/master/CHANGELOG.md'); //tslint:disable-line:no-floating-promises
} }
function onReady(): void { function onReady(): void {
log.transports.file.level = 'debug'; log.transports.file.level = 'debug';
log.transports.console.level = 'debug'; log.transports.console.level = 'debug';