From 375b79398439793b3668da528c6529b0279a1d5e Mon Sep 17 00:00:00 2001 From: Samuel Attard Date: Wed, 22 Apr 2020 12:43:21 -0700 Subject: [PATCH] fix: do not allow child windows to specify their own preload script (#23226) --- lib/common/parse-features-string.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/common/parse-features-string.ts b/lib/common/parse-features-string.ts index 32e847a6d641..cfc817351274 100644 --- a/lib/common/parse-features-string.ts +++ b/lib/common/parse-features-string.ts @@ -75,7 +75,7 @@ export function parseWebViewWebPreferences (preferences: string) { return parseCommaSeparatedKeyValue(preferences, false).parsed; } -const allowedWebPreferences = ['zoomFactor', 'nodeIntegration', 'enableRemoteModule', 'preload', 'javascript', 'contextIsolation', 'webviewTag'] as const; +const allowedWebPreferences = ['zoomFactor', 'nodeIntegration', 'enableRemoteModule', 'javascript', 'contextIsolation', 'webviewTag'] as const; type AllowedWebPreference = (typeof allowedWebPreferences)[number]; /**