skip to content

Security Hardening

0 questions

Electron's hardening checklist: contextIsolation and sandbox on, nodeIntegration off, a CSP for the renderer, a minimal preload surface, and validation of every IPC message. Interviewers ask because an app that loads remote content with these settings wrong is remote code execution on the user's machine.

questions

no questions here yet

this part of the tree is still being written

>
0 questions in this topic or below it