3 ms·
There's another angle to this that was discussed on the Risky Business[0] podcast a while back, namely the security angle. As the recent Microsoft Team's vulner
by K0nserv 6y ago
There's another angle to this that was discussed on the Risky Business[0] podcast a while back, namely the security angle. As the recent Microsoft Team's vulnerability[1] illustrated, with many Electron apps any XSS vulnerability turns into RCE. Personally I am moving away from Slack, Discord, and other electron apps like them. The browser sandbox ensures that XSS is "only" XSS and doesn't turn into RCE as well.
0: https://www.risky.biz/ https://www.risky.biz/
1: https://github.com/oskarsve/ms-teams-rce https://github.com/oskarsve/ms-teams-rce