From 9475a17b77b5f3c0553cc76f347a8ab4d231c799 Mon Sep 17 00:00:00 2001 From: Noah Vesely Date: Wed, 15 May 2019 12:34:02 +0100 Subject: [PATCH] Enable sandbox for WebViews Since v5.0.0 Electron has enabled the mixed sandbox by default. This means we can sandbox the WebViews, while leaving the main application un-sandboxed. --- app/ux/WebView.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/ux/WebView.js b/app/ux/WebView.js index cc900675..80dd8fe6 100644 --- a/app/ux/WebView.js +++ b/app/ux/WebView.js @@ -167,7 +167,7 @@ Ext.define('Rambox.ux.WebView',{ ,partition: 'persist:' + me.record.get('type') + '_' + me.id.replace('tab_', '') ,allowtransparency: 'on' ,autosize: 'on' - ,webpreferences: '' //,nativeWindowOpen=true + ,webpreferences: 'sandbox: true' //,nativeWindowOpen=true //,disablewebsecurity: 'on' // Disabled because some services (Like Google Drive) dont work with this enabled ,userAgent: me.getUserAgent() ,preload: './resources/js/rambox-service-api.js'