Merge pull request #5559 from electron/disable-webview

Disable webview when nodeIntegration is off
This commit is contained in:
Cheng Zhao 2016-05-18 01:26:58 +00:00
commit 397d0e34ee
5 changed files with 34 additions and 41 deletions

View file

@ -12,6 +12,9 @@ app. It doesn't have the same permissions as your web page and all interactions
between your app and embedded content will be asynchronous. This keeps your app
safe from the embedded content.
For security purpose, `webview` can only be used in `BrowserWindow`s that have
`nodeIntegration` enabled.
## Example
To embed a web page in your app, add the `webview` tag to your app's embedder