3 ms·
They're referring to the application developer. If the developer uses Electron only to open the application's own html files and doesn't render user-provided H
by AgentME 9y ago
They're referring to the application developer.
If the developer uses Electron only to open the application's own html files and doesn't render user-provided HTML anywhere, then there won't be any XSS vulnerabilities.