mirrors/electron
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions 1

Don't pass preloadPath via ELECTRON_BROWSER_SANDBOX_LOAD for security reasons (#13031) (#14026)

Browse source
This commit is contained in:
Milan Burda 2018-08-11 19:53:33 +02:00 • committed by Charles Kerr
parent fb2afe8656
commit b5bfd9867b
8 changed files with 55 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/sandboxed_renderer/init.js
View file

@ -1,5 +1,5 @@
/* eslint no-eval: "off" */
/* global binding, preloadPath, Buffer */
/* global binding, Buffer */
const events = require('events')
const electron = require('electron')
@ -37,7 +37,7 @@ const loadedModules = new Map([
const {
preloadSrc, preloadError, webContentsId, platform, env
} = electron.ipcRenderer.sendSync('ELECTRON_BROWSER_SANDBOX_LOAD', preloadPath)
} = electron.ipcRenderer.sendSync('ELECTRON_BROWSER_SANDBOX_LOAD')
Object.defineProperty(process, 'webContentsId', {
configurable: false,