Hacker News new | ask | show | jobs
by dependenttypes 2361 days ago
If only it was $2 of RAM...

> in exchange for security

Electron is not famous for its security. See for example https://www.trustwave.com/en-us/resources/blogs/spiderlabs-b... and https://securityboulevard.com/2018/06/june-vulnerability-of-...
1 comments
AgentME 2361 days ago
Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues. Avoiding XSS is doable; with most web frameworks you're protected from XSS by default and have to specifically turn off the safeties to get XSS.
link
dependenttypes 2361 days ago
> Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues

Such as signal! https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec...

link