Revert "feat: only allow bundled preload scripts (#17308)" (#18091)

This reverts commit 8cf15cc931.
This commit is contained in:
Milan Burda 2019-06-20 01:39:12 +02:00 committed by Cheng Zhao
parent 257fd2c0df
commit 4575a4aae3
9 changed files with 0 additions and 76 deletions

View file

@ -148,10 +148,6 @@ app.enableMixedSandbox()
Mixed-sandbox mode is now enabled by default.
### Preload scripts outside of app path are not allowed
For security reasons, preload scripts can only be loaded from a subpath of the [app path](app.md#appgetapppath).
## Planned Breaking API Changes (5.0)
### `new BrowserWindow({ webPreferences })`

View file

@ -266,8 +266,6 @@ It creates a new `BrowserWindow` with native properties as set by the `options`.
When node integration is turned off, the preload script can reintroduce
Node global symbols back to the global scope. See example
[here](process.md#event-loaded).
**Note:** For security reasons, preload scripts can only be loaded from
a subpath of the [app path](app.md#appgetapppath).
* `sandbox` Boolean (optional) - If set, this will sandbox the renderer
associated with the window, making it compatible with the Chromium
OS-level sandbox and disabling the Node.js engine. This is not the same as

View file

@ -418,8 +418,6 @@ Returns `Promise<void>` - resolves when the sessions HTTP authentication cach
Adds scripts that will be executed on ALL web contents that are associated with
this session just before normal `preload` scripts run.
**Note:** For security reasons, preload scripts can only be loaded from a subpath of the [app path](app.md#appgetapppath).
#### `ses.getPreloads()`
Returns `String[]` an array of paths to preload scripts that have been

View file

@ -162,9 +162,6 @@ When the guest page doesn't have node integration this script will still have
access to all Node APIs, but global objects injected by Node will be deleted
after this script has finished executing.
**Note:** For security reasons, preload scripts can only be loaded from
a subpath of the [app path](app.md#appgetapppath).
**Note:** This option will be appear as `preloadURL` (not `preload`) in
the `webPreferences` specified to the `will-attach-webview` event.