diff --git a/electron/index.js b/electron/index.js index 8882e7e1a..026699acf 100644 --- a/electron/index.js +++ b/electron/index.js @@ -95,14 +95,9 @@ function createWindow () { mainWindow.webContents.on('will-attach-webview', (event, webPreferences, params) => { // Strip away inline preload scripts, ours is at preloadURL delete webPreferences.preload; - // Verify the location of our prelaod script is legitimate (unless uiDev has been passed) - if (webPreferences.preloadURL !== encodeURI(url.format({ - pathname: path.join(__dirname, 'preload.js'), - protocol: 'file:', - slashes: true - })) && !cli.uiDev) { - throw new Error(`Unknown preload.js is being injected, quitting for security reasons. ${webPreferences.preloadURL}`); - } + + // TODO Verify that the location of webPreferences.preloadURL is: + // `file://path/to/app.asar/.build/preload.js` // Disable Node.js integration webPreferences.nodeIntegration = false; diff --git a/package-lock.json b/package-lock.json index d3810842d..b3b3455ba 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "parity-ui", - "version": "0.2.6", + "version": "0.2.7", "lockfileVersion": 1, "requires": true, "dependencies": { diff --git a/package.json b/package.json index 95afe29dc..bc545cde6 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "parity-ui", - "version": "0.2.6", + "version": "0.2.7", "description": "The Electron app for Parity UI", "main": ".build/electron.js", "jsnext:main": ".build/electron.js",