Salastil/streamwall
1
0
Fork 0
mirror of https://github.com/streamwall/streamwall.git synced 2026-01-31 09:22:49 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add explicit security related flags to browser windows

Browse Source
This commit is contained in:
Max Goodhart
2020-06-20 22:58:56 -07:00
parent 2a626fa396
commit 23e195ba03
2 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/node/StreamWindow.js
View File

@@ -95,7 +95,12 @@ export default class StreamWindow extends EventEmitter {
createView() { createView() {
const { win, overlayView, viewActions } = this const { win, overlayView, viewActions } = this
const view = new BrowserView({ const view = new BrowserView({
webPreferences: { partition: 'persist:session', sandbox: true }, webPreferences: {
nodeIntegration: false,
contextIsolation: true,
partition: 'persist:session',
sandbox: true,
},
}) })
view.setBackgroundColor('#000') view.setBackgroundColor('#000')

7
src/node/index.js
View File

@@ -81,7 +81,12 @@ async function main() {
} else if (msg.type === 'browse') { } else if (msg.type === 'browse') {
if (!browseWindow || browseWindow.isDestroyed()) { if (!browseWindow || browseWindow.isDestroyed()) {
browseWindow = new BrowserWindow({ browseWindow = new BrowserWindow({
webPreferences: { partition: 'persist:session', sandbox: true }, webPreferences: {
nodeIntegration: false,
contextIsolation: true,
partition: 'persist:session',
sandbox: true,
},
}) })
} }
browseWindow.loadURL(msg.url) browseWindow.loadURL(msg.url)