yang991178 / fluent-reader

Modern desktop RSS reader built with Electron, React, and Fluent UI
https://hyliu.me/fluent-reader/
BSD 3-Clause "New" or "Revised" License
7.79k stars 425 forks source link

Possible security leak by integrated web engine? #700

Open svenbolte opened 6 days ago

svenbolte commented 6 days ago

Describe the bug What CEF (Web engine) is used by fluent reader? Chromium CEF?

The file size of the exe implies that web engine is integrated into it. and there are chrome100/200percent.pak files in the dist folder. If CEF is integrated as Webviewer in the EXE, it is more than one year old.

Could you clarify whether and old portion CEF is used or what engine?

Maybe it would be a good idea to switch to Webiew2 Engine that should not be integrated but installed on the system. So engin will be updated automatically.

Platform (please complete the following information):