-
Notifications
You must be signed in to change notification settings - Fork 15.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
refactor: implement crashReporter.start() without the remote module #14434
Conversation
electron.gyp
Outdated
'-r', | ||
'./lib/sandboxed_renderer/api/exports/path.js:path', | ||
'-r', | ||
'./lib/sandboxed_renderer/api/exports/child_process.js:child_process' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should the GN build config be updated?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@alexeykuzmin done
ff6675c
to
f87ac07
Compare
478d532
to
a10e297
Compare
@alexeykuzmin it's ready for review. |
a10e297
to
693ad6a
Compare
693ad6a
to
963c968
Compare
963c968
to
5cf3045
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
5cf3045
to
da720ce
Compare
da720ce
to
03bfdce
Compare
No Release Notes |
Description of Change
The
crashReporter.start()
method depends on theremote
module when used in the renderer process. There is a PR, which adds the ability to disable the remote module to increase security, especially in the sandbox #13028. To enable this work, we need to implement this method by sending specialized IPC messages instead of using the remote module, which allows more fine gained validation of the IPCs to make sure they cannot be exploited.Checklist
npm test
passesRelease Notes
Notes: no-notes