search

LiveGTech / gShell

Interactive graphical desktop environment for LiveG OS.
https://liveg.tech/os
Other
15 stars 3 forks source link

Secure Electron runtime #3

Closed James-Livesey closed 2 years ago

James-Livesey commented 2 years ago

We need to set a content security policy to ensure that remote code can't be executed:

Electron Security Warning (Insecure Content-Security-Policy) This renderer process has either no Content Security
  Policy set or a policy with "unsafe-eval" enabled. This exposes users of
  this app to unnecessary security risks.

For more information and help, consult https://electronjs.org/docs/tutorial/security.
This warning will not show up
once the app is packaged.