Skip to content

BLINK_FEATURES_JS_CHECK

Anthony Trummer edited this page Jan 6, 2022 · 6 revisions

BLINK_FEATURES_JS_CHECK - Do not use Chromium’s experimental features

The blinkFeatures / enableBlinkFeatures flag can be used to selectively enable Blink (Chromium web browser engine) features, which increases the overall attack surface for production applications.


Risk

Experimental features may introduce bugs and increase the attack surface of the application.

Auditing

Search for blinkFeatures / enableBlinkFeatures flags set to true within the webPreferences of BrowserWindow:

mainWindow = new BrowserWindow({
  "webPreferences": {
    "enableBlinkFeatures": "CSSVariables"
  }
});

References