Disable remote module by default in --renderer

jprichardson · Dec 4, 2020 · f809f0a · f809f0a
1 parent 4545524
commit f809f0a
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/.mocharc.yml b/.mocharc.yml
@@ -3,3 +3,4 @@ require-main:
   - test/support/requireMain
 require:
   - test/support/require
+window-config-file: test/support/window.config.json
diff --git a/lib/run.js b/lib/run.js
@@ -183,7 +183,7 @@ exports.handler = async argv => {
         focusable: argv.renderer || argv.inspect,
         ...customWindowOptions,
         webPreferences: {
-          enableRemoteModule: true,
+          enableRemoteModule: false,
           contextIsolation: false,
           nodeIntegration: true,
           ...customWindowOptions.webPreferences,

diff --git a/test/support/window.config.json b/test/support/window.config.json
@@ -0,0 +1,5 @@
+{
+  "webPreferences": {
+    "enableRemoteModule": true
+  }
+}