Enable Context Isolation in Electron Fiddle
- Mentors
- erickzhao, dsanders11_old, Keeley Hammond
- Organization
- Electron
- Technologies
- javascript, react, typescript, electron
- Topics
- end-user application, Electron, Refactor
This project aims to get rid of the Node environment from the renderer process for Electron fiddle to enforce a stronger security model.
Basically, with the release of Electron v12.0.0, it is now made default to set the
contextIsolation as true which prevents the usage of powerful Node APIs in the renderer process.
However, these changes aren’t yet reflected in fiddle’s architecture due to which it
currently uses an outdated security model.
Therefore, over the summer I plan to refactor Electron fiddle by migrating all the Node APIs used in renderer process to main process and later call them via IPC events.