Don't open external links in the Electron context

[lukechilds]

If external links are opened in the Electron context, any JavaScript running on those sites can access the main Node.js process and will get remote code execution on the users OS.

[pbca26]

perhaps window.require('electron') ?
direct import doesn't work w/o any extra hacks afaik

[lukechilds]

import should work but it might depend on how your build process is configured. Updated to window.require('electron') for consistency with your original code.