GitHub - matt-/CVE-2018-15685: POC for CVE-2018-15685
This is a minimal Electron application with a POC for CVE-2018-15685. A remote code execution vulnerability has been discovered affecting apps with the ability to open nested child windows on Electron versions (3.0.0-beta.6, 2.0.7, 1.8.7, and 1.7.15). This vulnerability has been assigned the CVE identifier CVE-2018-15685. For more information see my full write up on the Contrast Security blog or t
ãƒãƒ£ãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚‚Slackã‚‚Skypeã‚‚ã€ã€ã€è¤‡æ•°ã®ã‚¢ãƒ—リを一元管ç†ã§ãる「Franz〠| Ledge.ai
ã©ã‚‚ã€ã‚†ã†ã›ã„ã§ã™ã€‚タイトルã§å…¨éƒ¨è¨€ã£ã¦ã¾ã™ã€‚神ツールã®ã”紹介ã§ã™ã€‚ãƒãƒ£ãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã€Slackã€FBメッセンジャーã€Skypeãªã©ãªã©ã€æ¡ˆä»¶ã‚„å–引先ã«åˆã‚ã›ã¦ã„ã‚ã‚“ãªãƒãƒ£ãƒƒãƒˆãƒ„ールを使ã£ã¦ã„ã‚‹ã‹ã¨æ€ã„ã¾ã™ãŒã€ãã‚Œã€å…¨éƒ¨ã²ã¨ã¤ã®ã‚¢ãƒ—リã§ç®¡ç†ã§ãã¾ã™ã€‚ 「Franzã€ãªã‚‰ãƒžãƒ«ãƒã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§é‹ç”¨å¯èƒ½ãƒ–ラウザã§ãƒãƒ£ãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¨Slackã¨FBメッセンジャーã€ã‚¢ãƒ—リã§Skypeã¨ã‹ã€ãªã‚“ã‹ã„ã‚ã„ã‚èµ·å‹•ã—ã¦ã„ã¾ã›ã‚“ã‹ï¼Ÿ 「Franzã€ã§å…¨éƒ¨ä¸€ç·’ã«ç®¡ç†ã—ã¦ã—ã¾ã„ã¾ã—ょã†ã€‚Macã€Windowsã€Linuxã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ ã¾ãšã¯ã‚¢ãƒ—リを以下よりダウンãƒãƒ¼ãƒ‰ã€‚ Franz – a free messaging app for Slack, Facebook Messenger, WhatsApp, Telegram and more Winã€Macã€Linuxã«å¯¾å¿œã€‚ アプリを起動ã—ãŸã‚‰ã€è¿½åŠ ã—ãŸã„サー
Security
NOTE: some content in this wiki applies only to 0.12 and earlier versions. For official documentation on 0.13 and later, see http://docs.nwjs.io node-webkit adds Node.js support and enhancement in DOM for trusted code and content. For untrusted code and content, it should remain in a normal frame or iframe, which is the same as the one in browser. So there are 2 kinds of frames in node-webkit: Nod
Atom needs a better security model · Issue #1763 · atom/atom
If we're going to add GitHub integration to Atom, we need to cache credentials inside the app. We had previously implemented GitHub auth for our Gists package, but we removed both the package and GitHub authentication from the beta release because we were afraid of providing GitHub credentials to every random Atom package people installed. We can't avoid this forever, though. To realize Atom's ful
electron/electron
If an attacker manages to inject a <script> tag in an Electron app (for example because the app failed to sanitize user input stored in a remote server), it seems like they would have nearly absolute control over the victim's machine. For example, they could require('fs') and do whatever they want with the victim's file system, e.g. destroy their home folder, snoop on sensitive data, etc. In the d
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Electron TechTalk
30分ã§å‡ºæ¥ã‚‹ã€JavaScript (Electron) ã§ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—アプリを作ã£ã¦é…布ã™ã‚‹ã¾ã§ - Qiita
{{#tags}}- {{label}}
{{/tags}}