mikaelbr / node-notifier

A Node.js module for sending notifications on native Mac, Windows and Linux (or Growl as fallback)
MIT License
5.73k stars 322 forks source link

Security risk #386

Open KennyGoi opened 2 years ago

KennyGoi commented 2 years ago

Affected files: node-notifier/vendor/mac.noindex/terminal-notifier.app/Contents/Info.plist 1: <?xml version="1.0" encoding="UTF-8"?>

Risks: ATS prevents accidental disclosures, provides secure default behavior, and is easy to adopt. App Transport Security (ATS) enforces best practices in the secure connections between an app and its back end.