File tree Expand file tree Collapse file tree 2 files changed +6
-28
lines changed
javascript/ql/src/Electron Expand file tree Collapse file tree 2 files changed +6
-28
lines changed Original file line number Diff line number Diff line change 55
66 <overview >
77 <p >
8- Enabling Node.js integration in web content renderers (BrowserWindow, BrowserView and webview) could result in
8+ Enabling Node.js integration in web content renderers (< code > BrowserWindow</ code >, < code > BrowserView</ code > and < code > webview</ code > ) could result in
99 remote native code execution attacks when rendering malicious JavaScript code from untrusted remote web site or
10- code that is injected via a cross site scripting vulnerability into the web content under processing. Please note that
11- the nodeIntegration property is enabled by default in Electron and needs to be set to ' false' explicitly.
10+ code that is injected via a cross site scripting vulnerability into a trusted remote web site. Note that
11+ the < code > nodeIntegration</ code > property is enabled by default in Electron and needs to be set to < code > false</ code > explicitly.
1212 </p >
1313 </overview >
1414
2121
2222 <example >
2323 <p >
24- The following example shows insecure use of BrowserWindow with regards to <code >nodeIntegration</code >
24+ The following example shows insecure use of < code > BrowserWindow</ code > with regards to <code >nodeIntegration</code >
2525 property:
2626 </p >
2727 <sample src =" examples/DefaultNodeIntegration.js" />
2828
2929 <p >
30- This is problematic, because default value of nodeIntegration is 'true'.
30+ This is problematic, because default value of < code > nodeIntegration</ code > is 'true'.
3131 </p >
3232
3333 </example >
3434
35- <example >
36- <p >
37- The following example shows insecure and secure uses of <code >webview</code > tag:
38- </p >
39- <sample src =" examples/WebViewNodeIntegration.html" />
40-
41- </example >
4235
4336 <example >
4437 <p >
45- The following example shows insecure and secure uses of BrowserWindow and BrowserView when
38+ The following example shows insecure and secure uses of < code > BrowserWindow</ code > and < code > BrowserView</ code > when
4639 loading untrusted web sites:
4740 </p >
4841 <sample src =" examples/EnablingNodeIntegration.js" />
Load Diff This file was deleted.
You can’t perform that action at this time.
0 commit comments