3 ms·
Since electron is basically a headless browser, you would be opening up any app with an XSS vulnerability to any other app running in the runtime.
by zelon88 6y ago
Since electron is basically a headless browser, you would be opening up any app with an XSS vulnerability to any other app running in the runtime.
- scaladev 6y agoHeadless? It even has the same debug console as the ordinary Chromium. Basically the only thing it misses is the URL bar and navigation buttons. It's just a browser with some OS integration slapped on the side.
- chasd00 6y agoTrue, I’ve always thought of electron as phonegap/Cordova for desktops.
- oshanz 6y agoSo it needs a isolation like firefox containers