Isolating Electron Renderers with Context Isolation and Preload Bridges
A practical look at using contextIsolation, preload scripts, and contextBridge to keep Electron renderer processes from accessing Node.js directly.
Loading…
ReadMeFeed / Community knowledge
#context-isolation
Real questions. Useful conversations. Find the people who know your stack.
electronSecure Renderer-to-Main IPC in Electron Using contextBridge
Expose a limited API from Electron's preload script to the renderer with contextBridge, keeping Node integration disabled.
Diagnosing Missing contextBridge APIs in Electron Renderer Processes
Renderer code calling window.myAPI gets undefined even though the preload script exposes it. This guide shows how to isolate the cause and fix it without weakening renderer security.
Safe Node Access in NW.js: Preload Scripts Over Full Renderer Integration
Enable Node integration in NW.js without exposing the full runtime to your renderer by combining context isolation with a preload-based API surface.
nodewebkitSecuring Electron Renderers with Context Isolation and Preload APIs
Prevent renderer code in Electron from accessing Node APIs by enabling contextIsolation, disabling nodeIntegration, and exposing a safe API via a preload script. This guide shows the minimal config, trust boundaries, checks, and failure modes.
Securing Electron Apps with Context Isolation: Why, How, and What to Watch Out For
Enable Electron’s context isolation to protect your app from injection attacks. Learn how to configure BrowserWindow, expose safe APIs via preload scripts, verify isolation, and handle trade‑offs with a practical example.
Electron Renderer Node.js: Using contextIsolation and contextBridge Securely
Enabling Node.js in Electron renderers the secure way, using contextIsolation, preload scripts, and contextBridge.
The One Electron Bridge You Actually Need: contextBridge Without the Headaches
Electron's context isolation wall is deliberate — and contextBridge is the only door through it. A practical walkthrough of the preload/main/renderer pattern, Structured Clone pitfalls, and the escape hatches to avoid.
Hardening Electron Renderers: Choosing Between Context Isolation and Node Integration
A decision guide for Electron developers on implementing context isolation versus node integration to secure renderer processes and prevent RCE vulnerabilities.