search

zulip / zulip-desktop

Zulip Desktop client for Mac, Windows and Linux.
https://zulip.com/apps
Apache License 2.0
840 stars 422 forks source link

use renderer sandbox when it's available #661

Open glyph opened 5 years ago

glyph commented 5 years ago

Progress is being made on running Electron renderers in the Chromium sandbox:

https://github.com/electron/electron/issues/6712

(As of this writing, 6/8 tasks there.)

When this is available, the Zulip desktop app should adopt it to provide defense in depth against browser-based exploits escalating to local RCE.

timabbott commented 5 years ago

Cool, thanks for opening this issue @glyph!