Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: implement crashReporter.start() without the remote module #14434

Merged
merged 1 commit into from
Sep 26, 2018

Conversation

miniak
Copy link
Contributor

@miniak miniak commented Sep 3, 2018

Description of Change

The crashReporter.start() method depends on the remote module when used in the renderer process. There is a PR, which adds the ability to disable the remote module to increase security, especially in the sandbox #13028. To enable this work, we need to implement this method by sending specialized IPC messages instead of using the remote module, which allows more fine gained validation of the IPCs to make sure they cannot be exploited.

Checklist
  • PR description included and stakeholders cc'd
  • npm test passes
  • PR title follows semantic commit guidelines
Release Notes

Notes: no-notes

electron.gyp Outdated
'-r',
'./lib/sandboxed_renderer/api/exports/path.js:path',
'-r',
'./lib/sandboxed_renderer/api/exports/child_process.js:child_process'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should the GN build config be updated?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@miniak miniak self-assigned this Sep 3, 2018
@miniak miniak changed the title refactor: implement crashReporter.start() without the remote module [wip] refactor: implement crashReporter.start() without the remote module Sep 11, 2018
@miniak miniak force-pushed the miniak/crash-reporter branch 4 times, most recently from 478d532 to a10e297 Compare September 21, 2018 06:41
@miniak miniak changed the title [wip] refactor: implement crashReporter.start() without the remote module refactor: implement crashReporter.start() without the remote module Sep 21, 2018
@miniak
Copy link
Contributor Author

miniak commented Sep 21, 2018

@alexeykuzmin it's ready for review.

Copy link
Contributor

@alexeykuzmin alexeykuzmin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

lib/common/api/crash-reporter.js Show resolved Hide resolved
lib/browser/rpc-server.js Outdated Show resolved Hide resolved
lib/browser/rpc-server.js Outdated Show resolved Hide resolved
@MarshallOfSound MarshallOfSound merged commit 3df739f into master Sep 26, 2018
@release-clerk
Copy link

release-clerk bot commented Sep 26, 2018

No Release Notes

@MarshallOfSound MarshallOfSound deleted the miniak/crash-reporter branch September 26, 2018 05:43
@miniak miniak mentioned this pull request Oct 17, 2018
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants