BLINK_FEATURES_HTML_CHECK

BLINK_FEATURES_CHECK - Do not use Chromium’s experimental features

The blinkFeatures / enableBlinkFeatures flag can be used to enable selectively Blink (Chromium web browser engine) features, which increases the overall attack surface for production applications.

---

Risk

Experimental features may introduce bugs and increase the application attack surface.

Auditing

Search for blinkFeatures / enableBlinkFeatures flags set to true within webview tags:

<webview src="https://doyensec.com/" blinkfeatures="PreciseMemoryInfo,CSSVariables"></webview>

References

• https://electronjs.org/docs/all#9-do-not-use-enableblinkfeatures