Electron Renderer Trust Boundary: contextIsolation and Preload IPC
Isolate Electron renderer processes with contextIsolation, nodeIntegration, and a typed preload API; validate all IPC in the main process.
Loading…
ReadMeFeed / Community knowledge
#ipc-security
Real questions. Useful conversations. Find the people who know your stack.
electronPrivilege Escalation via ContextBridge Exposure in Electron
Electron's security model relies on contextIsolation to separate the renderer process from the main process. To facilitate communication, the contextBridge module allows developers to expose a limited API from a preload script to the renderer's global window object. A critical design concern arises when complex objects or entire Electron modules are passed t