refactor: initial security refactor

app/index.tsx

@@ -4,11 +4,16 @@ import { render } from 'react-dom';
 import { AppContainer as ReactHotAppContainer } from 'react-hot-loader';
 
 import { configureStore, history } from './store/configureStore';
+import { ipcRenderer, contextBridge } from 'electron';
 
 const { store, persistor } = configureStore();
 
 const AppContainer = process.env.PLAIN_HMR ? Fragment : ReactHotAppContainer;
 
+// contextBridge.exposeInMainWorld('api', {
+//   xxx: 123,
+// });
+
 document.addEventListener('DOMContentLoaded', () => {
   // eslint-disable-next-line @typescript-eslint/no-var-requires
   const Root = require('./pages/root').default;

app/main.dev.ts

@@ -81,17 +81,18 @@ const createWindow = async () => {
     frame: process.platform !== 'darwin',
     titleBarStyle: process.platform === 'darwin' ? 'hidden' : 'default',
     icon: path.join(__dirname, '../resources/icon-no-padding-512x512.png'),
-    webPreferences:
-      process.env.NODE_ENV === 'development' || process.env.E2E_BUILD === 'true'
+    webPreferences: {
+      webSecurity: true,
+      contextIsolation: true,
+      ...(process.env.NODE_ENV === 'development' || process.env.E2E_BUILD === 'true'
         ? {
             nodeIntegration: true,
           }
         : {
             nodeIntegration: false,
-            contextIsolation: true,
-            webSecurity: true,
-            preload: path.join(__dirname, 'dist/renderer.prod.js'),
-          },
+            // preload: path.join(__dirname, 'dist/renderer.prod.js'),
+          }),
+    },
   });
 
   if (process.platform === 'darwin') mainWindow.setTrafficLightPosition({ x: 10, y: 28 });

configs/webpack.config.renderer.prod.babel.js

@@ -21,7 +21,7 @@ export default merge.smart(baseConfig, {
 
   mode: 'production',
 
-  target: 'electron-preload',
+  target: 'electron-renderer',
 
   entry: path.join(__dirname, '..', 'app/index.tsx'),