mirrors/electron
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions 1

allowDisplayingInsecureContent is removed by Chrome

Browse source
This commit is contained in:
Cheng Zhao 2017-01-24 14:42:02 +09:00 • committed by Kevin Sawicki
parent 47c1bc9f66
commit 2e0780308c
13 changed files with 7 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/tutorial/security.md
View file

@ -64,7 +64,6 @@ This is not bulletproof, but at the least, you should attempt the following:
, and use restrictive rules (i.e. `script-src 'self'`)
* [Override and disable `eval`](https://github.com/nylas/N1/blob/0abc5d5defcdb057120d726b271933425b75b415/static/index.js#L6-L8)
, which allows strings to be executed as code.
* Do not set `allowDisplayingInsecureContent` to true.
* Do not set `allowRunningInsecureContent` to true.
* Do not enable `experimentalFeatures` or `experimentalCanvasFeatures` unless
you know what you're doing.