[GH-ISSUE #117] 🗺️ Roadmap: Security Enhancements #160

New issue

Closed

opened 2026-03-13 17:34:06 +03:00 by kerem · 0 comments

kerem commented

2026-03-13 17:34:06 +03:00

Owner

Originally created by @Aetherinox on GitHub (Jun 26, 2025).
Original GitHub issue: https://github.com/Aetherinox/ntfy-desktop/issues/117

Originally assigned to: @Aetherinox on GitHub.

Summary

With the re-write of ntfy-desktop, we must introduce numerous security enhancements:

Tasks

Disable Node Integration
- Change nodeIntegration: false to prevent renderer from accessing Node.js API
- See #88
Enable Content Isolation
- Ensure proper isolation between main and renderer processes
Disable Remote Module
- Prevent potential security vulnerabilities
Enable Web Security
- Blocks insecure content and experimental features
Sandbox About dialog
- Add sandbox mode for About dialog
- See https://www.electronjs.org/docs/latest/tutorial/sandbox

Resources

None

References:

Originally created by @Aetherinox on GitHub (Jun 26, 2025). Original GitHub issue: https://github.com/Aetherinox/ntfy-desktop/issues/117 Originally assigned to: @Aetherinox on GitHub. ## Summary With the re-write of ntfy-desktop, we must introduce numerous security enhancements: <br /> ### Tasks - [x] Disable Node Integration - Change `nodeIntegration: false` to prevent renderer from accessing Node.js API - See #88 - [x] Enable Content Isolation - Ensure proper isolation between main and renderer processes - [x] Disable Remote Module - Prevent potential security vulnerabilities - [x] Enable Web Security - Blocks insecure content and experimental features - [x] Sandbox `About` dialog - Add sandbox mode for `About` dialog - See https://www.electronjs.org/docs/latest/tutorial/sandbox <br /> ### Resources - None <br /> ### References: - #88