secure-electron-template

A current electron app template with the most popular frameworks, designed and built with security in mind. Once cloned, install the dependencies for the repo by running the following commands (you do not have to run the first command if your command line is already inside the newly cloned repository) Only load secure content (But the developer is responsible for loading secure assets only) Do not enable node.js integration for the remote content. Enable context isolation for the remote content. Handle session permission requests from remote content. Do not disable web security. Define a content security policy. Do not set allowRunningInsecureContent to true. Do not enable experimental features. Do not use enableBlinkFeatures. Do not use allow popups. <webview> verify options and params. Disable or limit navigation. Disable or limit creation of new windows. Do not use openExternal with untrusted content. Disable remote module.