Skip to content

Latest commit

 

History

History
44 lines (24 loc) · 1.32 KB

README.md

File metadata and controls

44 lines (24 loc) · 1.32 KB

Banner Desktop app for spoflyv1.herokuapp.com

It helps you to find lyrics of song you are currently listening on spotify without authentication.

Screenshots

Image of flume-friends Image of rickroll

Security

  • ✅ Only load secure content

  • ⬜️Disable the Node.js integration in all renderers that display remote content

  • ⬜️Enable context isolation in all renderers that display remote content

  • ⬜️Use ses.setPermissionRequestHandler() in all sessions that load remote content

  • ✅Do not disable webSecurity

  • ✅Define a Content-Security-Policy and use restrictive rules (i.e. script-src 'self')

  • ✅Do not set allowRunningInsecureContent to true

  • ✅Do not enable experimental features

  • ✅Do not use enableBlinkFeatures

  • ✅< webview >: Do not use allowpopups

  • ⬜️< webview >: Verify options and params

  • ✅Disable or limit navigation

  • ✅Disable or limit creation of new windows

  • ✅Do not use openExternal with untrusted content

  • ⬜️Disable the remote module

  • ⬜️Filter the remote module

  • ✅Use a current version of Electron