From f244e7592772b6aee64d12bac93e61b4a0b58d0c Mon Sep 17 00:00:00 2001 From: Aryan Shridhar Date: Wed, 14 Sep 2022 02:26:41 +0530 Subject: [PATCH] docs: add IPC validation guideline link in checklist (#35573) --- docs/tutorial/security.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/tutorial/security.md b/docs/tutorial/security.md index 0d98921a95af..d5b9399cf40d 100644 --- a/docs/tutorial/security.md +++ b/docs/tutorial/security.md @@ -113,6 +113,7 @@ You should at least follow these steps to improve the security of your applicati 14. [Disable or limit creation of new windows](#14-disable-or-limit-creation-of-new-windows) 15. [Do not use `shell.openExternal` with untrusted content](#15-do-not-use-shellopenexternal-with-untrusted-content) 16. [Use a current version of Electron](#16-use-a-current-version-of-electron) +17. [Validate the `sender` of all IPC messages](#17-validate-the-sender-of-all-ipc-messages) To automate the detection of misconfigurations and insecure patterns, it is possible to use