Electron 4.0.0 - Hackdot

Re:Electron 4.0.0 by fabiospampinato on Friday December 21, 2018 @02:04PM (#18735644)

> and with Electron it runs as me, the user, not inside a browser sandbox

You could actually not use any external modules in your main process and have the renderer process sandboxed [1], node integration [2] can be disabled too.

[1] https://electronjs.org/docs/api/sandbox-option

[2] https://electronjs.org/docs/faq#i-can-not-use-jqueryrequirej...

[ Parent | on HN ]

Re:Electron 4.0.0 by munchbunny on Friday December 21, 2018 @02:29PM (#18735843)

Thanks for bringing this up, I wasn't aware of the option. This changes how I look at the trade-offs of using Electron.

Unfortunately, that only covers the rendering code, and it still backtracks a lot of the reason putting JS into a native environment is convenient in the first place. But it's a lot better than the "nothing at all" I thought it was before.

[ Parent | on HN ]