From 9475a17b77b5f3c0553cc76f347a8ab4d231c799 Mon Sep 17 00:00:00 2001
From: Noah Vesely <fowlslegs@riseup.net>
Date: Wed, 15 May 2019 12:34:02 +0100
Subject: [PATCH] Enable sandbox for WebViews

Since v5.0.0 Electron has enabled the mixed sandbox by default. This
means we can sandbox the WebViews, while leaving the main application
un-sandboxed.
---
 app/ux/WebView.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/ux/WebView.js b/app/ux/WebView.js
index cc900675..80dd8fe6 100644
--- a/app/ux/WebView.js
+++ b/app/ux/WebView.js
@@ -167,7 +167,7 @@ Ext.define('Rambox.ux.WebView',{
 					,partition: 'persist:' + me.record.get('type') + '_' + me.id.replace('tab_', '')
 					,allowtransparency: 'on'
 					,autosize: 'on'
-					,webpreferences: '' //,nativeWindowOpen=true
+					,webpreferences: 'sandbox: true' //,nativeWindowOpen=true
 					//,disablewebsecurity: 'on' // Disabled because some services (Like Google Drive) dont work with this enabled
 					,userAgent: me.getUserAgent()
 					,preload: './resources/js/rambox-service-api.js'