Durtur / Dungeoneer

A virtual tabletop designed for 5e D&D, includes a map tool with dynamic lighting, initiative tracker, combat tracker and homebrew management.
GNU Affero General Public License v3.0
169 stars 16 forks source link

[BUG] Context isolation refactoring #81

Open Durtur opened 1 year ago

Durtur commented 1 year ago

Require should not be accessible in the renderer scripts due to security reasons. If the window navigates to a malicious site the said site could possibly require and use libraries such as filesystem.

Dungeoneer does not currently navigate to any sites but these libraries should none the less be inaccessible, especially with plugin/mod implementation.

See: https://www.electronjs.org/docs/latest/tutorial/context-isolation