mirrors/electron
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions 1

Correct typos in docs

Browse source
This commit is contained in:
Kevin Sawicki 2016-06-16 15:19:38 -07:00
parent 64ae5cf5a1
commit 094098b571
5 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/tutorial/security.md
View file

@ -56,7 +56,7 @@ This is not bulletproof, but at the least, you should attempt the following:
(using `webPreferences`)
* Do not disable `webSecurity`. Disabling it will disable the same-origin policy.
* Define a [`Content-Security-Policy`](http://www.html5rocks.com/en/tutorials/security/content-security-policy/)
, and use restrictive rules (ie: `script-src 'self'`)
, and use restrictive rules (i.e. `script-src 'self'`)
* [Override and disable `eval`](https://github.com/nylas/N1/blob/0abc5d5defcdb057120d726b271933425b75b415/static/index.js#L6)
, which allows strings to be executed as code.
* Do not set `allowDisplayingInsecureContent` to true.