search

reZach / secure-electron-store

A secure electron-store that uses ipcMain/ipcRenderer.
MIT License
51 stars 2 forks source link

Any difference between electron-store? #4

Closed kaushalyap closed 3 years ago

kaushalyap commented 3 years ago

I do not see your claims about fs usage still exists in electron store.

reZach commented 3 years ago

Thanks for your investigation @kaushalyap. As you see on this line, electron-store loads up the conf library which loads the fs library.

Because the electron-store is meant to be used in your renderer processes directly, which is why they recommend you need to enable the remote module, using electron-store can be less secure because a best-practice of security is not using the remote module.

I hope this explanation helps a bit!

kaushalyap commented 3 years ago

thanks for the explanation, did not knew about conf using fs.