From fd529ac30a7875c22d6d5b6d7af003843e0fbf18 Mon Sep 17 00:00:00 2001 From: Samuel Attard Date: Wed, 22 Apr 2020 16:02:15 -0700 Subject: [PATCH] fix: do not allow child windows to specify their own preload script (#23229) --- lib/browser/guest-window-manager.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/browser/guest-window-manager.js b/lib/browser/guest-window-manager.js index a830de35d8d70..eb2fd9e8cc60a 100644 --- a/lib/browser/guest-window-manager.js +++ b/lib/browser/guest-window-manager.js @@ -195,7 +195,7 @@ ipcMainInternal.on('ELECTRON_GUEST_WINDOW_MANAGER_WINDOW_OPEN', (event, url, fra const options = {}; const ints = ['x', 'y', 'width', 'height', 'minWidth', 'maxWidth', 'minHeight', 'maxHeight', 'zoomFactor']; - const webPreferences = ['zoomFactor', 'nodeIntegration', 'enableRemoteModule', 'preload', 'javascript', 'contextIsolation', 'webviewTag']; + const webPreferences = ['zoomFactor', 'nodeIntegration', 'enableRemoteModule', 'javascript', 'contextIsolation', 'webviewTag']; const disposition = 'new-window'; // Used to store additional features