Re:From Markdown to remote code execution in Atom
by AgentME on Thursday November 23, 2017 @06:18PM
(#15768477)
They're referring to the application developer.
If the developer uses Electron only to open the application's own html files and doesn't render user-provided HTML anywhere, then there won't be any XSS vulnerabilities.
If the developer uses Electron only to open the application's own html files and doesn't render user-provided HTML anywhere, then there won't be any XSS vulnerabilities.