Compass: Electron recommended security settings - utility processes

ExportXMLWordPrintableJSON

    • Type: Investigation
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • None
    • Developer Tools

      Compass has contextIsolation off and nodeIntegration on.

      Context isolation has been enabled by default since Electron 12, and it is a recommended security setting for all applications. Node integration means that the renderer could use system resources, making a potentially compromised renderer more dangerous.

      https://www.electronjs.org/docs/latest/tutorial/security
      https://www.electronjs.org/docs/latest/tutorial/context-isolation

        1.
        		 Investigate: Migrate Import Export off of Node.js APIs COMPASS-11336 Sub-task In Progress Neal Beeken  

            Assignee:
            Neal Beeken
            Reporter:
            Paula Stachova
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: