Rewrite win-ca.ts
in Go for Electron Sandboxing Compatibility
#5637
Labels
kind/quality
quality improvements, refactoring, Automation via CI, E2E, Integration, CLI or REST API
platform/windows
priority/1
Work should be fixed for next release
Milestone
After the release of Electron version 20.3.8, a sandboxing feature was introduced to improve security. This sandboxing feature restricts access to memory using pointers, which impacts libraries that rely on direct memory access, such as
ref-napi
used byffi-napi
. As a result, Electron applications can crash when interacting with these libraries 1.We've addressed the sandboxing issue in #5620 by utilizing the node TLS module2, but this approach can lead to regressions in highly secured environments. We need to address the sandboxing issue in such a way so that existing behavior will not regress in Rancher Desktop.
Proposed Solution
Footnotes
https://www.electronjs.org/blog/v8-memory-cage ↩
https://nodejs.org/api/tls.html#tlsrootcertificates ↩
The text was updated successfully, but these errors were encountered: