Skip to content

security: disable nodeIntegration in mainWindow#9979

Draft
jackkav wants to merge 9 commits into
Kong:developfrom
jackkav:spike/full-disable
Draft

security: disable nodeIntegration in mainWindow#9979
jackkav wants to merge 9 commits into
Kong:developfrom
jackkav:spike/full-disable

Conversation

@jackkav
Copy link
Copy Markdown
Contributor

@jackkav jackkav commented May 28, 2026

Scope (second half)

This PR now tracks the higher-risk follow-up work after splitting low-risk changes into #9988.

In scope here:

  • templating runtime adapter behavior and unresolved renderer/node execution paths
  • nodeIntegration-related runtime wiring and main/preload coupling
  • renderer node-import baseline policy/workflow/script changes

Progress

Next steps

  1. finalize templating behavior so renderer and node paths are both correct and isolated
  2. validate nodeIntegration-related runtime behavior end-to-end
  3. keep/rework baseline policy decisions once runtime behavior is settled

};

const encryptAES = (symmetricKey: JsonWebKey, plaintext: string): AESMessage => {
const cipher = forge.cipher.createCipher('AES-GCM', getKeyBytes(symmetricKey));
};

const decryptAES = (symmetricKey: JsonWebKey, encryptedValue: AESMessage) => {
const decipher = forge.cipher.createDecipher('AES-GCM', getKeyBytes(symmetricKey));
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants