New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

use renderer sandbox when it's available #661

Open

glyph opened this issue Feb 22, 2019 · 1 comment

Labels

blocked-upstream

glyph commented Feb 22, 2019

Progress is being made on running Electron renderers in the Chromium sandbox:

electron/electron#6712

(As of this writing, 6/8 tasks there.)

When this is available, the Zulip desktop app should adopt it to provide defense in depth against browser-based exploits escalating to local RCE.

Member

timabbott commented Feb 22, 2019

Cool, thanks for opening this issue @glyph!

akashnimare added the blocked-upstream label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment