Skip to content

Isolate renderers and block untrusted window navigation - #1

Merged
mikkel merged 1 commit into
masterfrom
security/october-2026-input-build-fixes
Oct 23, 2026
Merged

mikkel merged 1 commit into
masterfrom
security/october-2026-input-build-fixes

Conversation

@mikkel

@mikkel mikkel commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Security source changes: Isolate renderers and block untrusted window navigation.

Validation:

  • 5 Node24.22.1 security policy/event tests pass
  • main.js syntax check passes
  • Renderer source has no Node/Electron API imports; GUI compatibility not established

Official references:

No running environments are modified by this source PR. Rollback: revert the merge commit. Rebuild/install/restart consumers separately after qualification.

Mitigation only: Electron9/native Node and Chromium remain unsupported. No patched embedded Brotli release or GUI migration has been verified.

@mikkel
mikkel merged commit f5ecc87 into master Oct 23, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant