electron-vite/electron-vite-react

Setting sandbox to false is a security threat for using bytecodeplugin

kotasudhakar opened this issue · 0 comments

I understand that it was asked to turn the sandbox option to false in order to protect source code using bytecode plugin as it uses the nodevm, however it is kinda dangerous tbh to do so although there are still other options like contextIsolation to prevent render process accessing the main process.

Can we do in any other alternative way so that we no need to set the sandbox value to false for browserWindow options and improving security?