Lock down Webview - Githubissues

mountainash / Mixcloud-Play

Mixcloud macOS desktop app with media controls, track title in menu bar & notifications

https://github.com/mountainash/Mixcloud-Play/releases/latest

20 stars 3 forks source link

Lock down Webview #22

Open mountainash opened 4 years ago

mountainash commented 4 years ago

Tighten up the security of what the external website can do: https://www.electronjs.org/docs/tutorial/security#11-verify-webview-options-before-creation

mountainash commented 4 years ago

Also:

[ ] 12 Disable or limit navigation
[ ] 13 Disable or limit creation of new windows
[ ] Most other things on that Security list

mountainash commented 4 years ago

Much more secure in now 5b781510fefb9a479bb458da9f9dd4a304ce387d But should still audit more.