electron/remote

Still supported?

cpgb85 opened this issue · 7 comments

cpgb85 commented

This hasn't been updated in 8 months, is this active anymore?

I'm not sure why electron insists creating files and folders is bad, almost every program does it.

erickzhao commented

The package isn't actively being developed, although I think a few of us follow the issue tracker and try to address problems with usage. This module was meant as a bridge for apps to gradually migrate off of the the remote module.

I'm not sure why electron insists creating files and folders is bad, almost every program does it.

What do you mean by this?

cpgb85 commented

What do you mean by this?

The reason remote was removed to begin with, is they didn't want you to create files and folders from the browser window. I guess I'm confused as to why this is such a terrible thing.

I tried going with straight up electron on the past, communicating between all these different layers is terrible and cumbersome.

Do you have any suggestions on how I should create a file or folder without having to go through 3 different event listeners?

I need a user to be able to select a working directory, this package made it so convenient for me.

MarshallOfSound commented

The reason remote was removed to begin with, is they didn't want you to create files and folders from the browser window. I guess I'm confused as to why this is such a terrible thing.

This is not true. Remote was removed because it is insecure and inherently unsafe

Do you have any suggestions on how I should create a file or folder without having to go through 3 different event listeners?

If your apps security model allows for it you can turn off contextIsolation and enable nodeIntegration, then just do whatever you want from the renderer. The correct / safe way to do it is to use contextBridge + ipc invoke/handle but it's up to you how to implement it.

cpgb85 commented

This is part of my problem. everybody seems to just keep saying "insecure and unsafe" without describing how this is the case. What is unsafe about this?

erickzhao commented

Here was the impetus for this change back in 2019:

cpgb85 commented

So basically some people theorized this could be the case, so our lives got more difficult as a result.

cpgb85 commented

I don't pretend to also be a security expert, but I don't get why it matters running these processes int he window, or in a round about way in the background. They both achieve the same thing in the end, one is just more simple.