electron/lib
Jerry Wu dee331519c fix: disable nodeIntegration & insecure resource warnings for localhost (#18814)
* fix: disable remote host nodeIntegration warning for localhost

In warnAboutNodeWithRemoteContent(), add a check to see if the hostname
is "localhost" and prevent the warning message if it is.

* fix: disable loading insecure resources warning for localhost

In warnAboutInsecureResources(), filter out resources from localhost
since they are most likely not a threat.

* test: add tests for ignoring security warnings when using localhost

Add tests for ignoring warning messages for the following scenarios:
  1. node integration with remote content from localhost
  2. loading insecure resources from localhost

* test: fix insecure resource test

* test: pass nodeIntegration with remote test on did-finish-load

* test: maybe fix node integration test (error w/ conv circular struct)

* test: update test description

* test: use "load" event to check when nodeIntegration test has finished

Instead of relying on the "did-finish-load" event, which may result in
a race condition, add an "onload" handler that logs "loaded" to the
console. This will execute _after_ the nodeIntegration check, so it
can be safely used as a signal to indicate that the test is done.

* test: rename base-page-security-load-message.html

* fix: ignore enabled remote module warning for localhost

* refactor: add isLocalhost()
2019-07-02 19:36:50 +09:00
..
browser Revert "feat: only allow bundled preload scripts (#17308)" (#18091) 2019-06-20 08:39:12 +09:00
common fix: override the timers module impls to activate the uv loop (#18948) 2019-06-24 10:18:29 -07:00
content_script refactor: bundle the browser and renderer process electron code (#18553) 2019-06-02 13:03:03 -07:00
isolated_renderer chore: rename atom-binding-setup.ts to electron-binding-setup.ts (#17949) 2019-04-29 10:57:32 -04:00
renderer fix: disable nodeIntegration & insecure resource warnings for localhost (#18814) 2019-07-02 19:36:50 +09:00
sandboxed_renderer refactor: piggy-back on ELECTRON_BROWSER_SANDBOX_LOAD to get content scripts (#18823) 2019-06-19 17:23:44 +02:00
worker refactor: remove electron.asar and embed JS in binary (#18577) 2019-06-03 17:03:59 -07:00