mirrors/electron
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Merge pull request #7666 from amtj/issue#6939

Browse source 
📝Remove ambiguous default value of nodeintegration Issue #6939
This commit is contained in:
Kevin Sawicki 2016-10-24 09:54:46 +09:00 committed by GitHub
commit e93eaed5d0
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
docs/tutorial/security.md
View file

@ -66,7 +66,7 @@ This is not bulletproof, but at the least, you should attempt the following:
* Do not enable `experimentalFeatures` or `experimentalCanvasFeatures` unless * Do not enable `experimentalFeatures` or `experimentalCanvasFeatures` unless
you know what you're doing. you know what you're doing.
* Do not use `blinkFeatures` unless you know what you're doing. * Do not use `blinkFeatures` unless you know what you're doing.
* WebViews: Set `nodeintegration` to false * WebViews: Do not add the `nodeintegration` attribute.
* WebViews: Do not use `disablewebsecurity` * WebViews: Do not use `disablewebsecurity`
* WebViews: Do not use `allowpopups` * WebViews: Do not use `allowpopups`
* WebViews: Do not use `insertCSS` or `executeJavaScript` with remote CSS/JS. * WebViews: Do not use `insertCSS` or `executeJavaScript` with remote CSS/JS.
@ -77,8 +77,8 @@ is to display a website, a browser will be a more secure option.
## Buffer Global ## Buffer Global
Node's [Buffer](https://nodejs.org/api/buffer.html) class is currently available Node's [Buffer](https://nodejs.org/api/buffer.html) class is currently available
as a global even when `nodeIntegration` is set to `false`. You can delete as a global even when the `nodeintegration` attribute is not added. You can
this in your app by doing the following in your `preload` script: delete this in your app by doing the following in your `preload` script:
```js ```js
delete global.Buffer delete global.Buffer