Overview:

The secure-electron-template is an Electron app template designed and built with security in mind. It includes popular frameworks such as Electron, React, Typescript, and Redux. The template focuses on following best practices for security and includes features like loading secure content, enabling context isolation for remote content, and handling session permission requests. It also provides additional modules for localization, storing config/data, custom context menus, and more. The template's architecture is documented for better understanding, and there is an FAQ section for common questions. Users are encouraged to share their applications built using this template.

Features:

Only load secure content
Do not enable node.js integration for remote content
Enable context isolation for remote content
Handle session permission requests from remote content
Do not disable web security
Define a content security policy
Do not set allowRunningInsecureContent to true
Do not enable experimental features
Do not use enableBlinkFeatures
Do not use allowpopups
<webview> verify options and params
Disable or limit navigation
Disable or limit creation of new windows
Do not use openExternal with untrusted content
Disable remote module
Filter the remote module
Use a current version of Electron

Summary:

The secure-electron-template is an Electron app template that prioritizes security. It includes key features for secure content loading, isolation for remote content, session permission handling, and more. The template also provides popular frameworks and additional modules for localization, data storage, custom context menus, and license key validation. It is well-documented and encourages users to contribute their applications built using this template.

Rezach

Secure Electron Template