#ipc-security

Privilege Escalation via ContextBridge Exposure in Electron

Electron's security model relies on contextIsolation to separate the renderer process from the main process. To facilitate communication, the contextBridge module allows developers to expose a limited API from a preload script to the renderer's global window object. A critical design concern arises when complex objects or entire Electron modules are passed t

electroncontext-isolationprivilege-escalationRahul Dey0 rep · 24 Apr 2021, 06:35 UTC