Refactor preload scripts to be secure on Electron 20

[manusa]

References

• [RFC] Parcel 2: Better Electron support parcel-bundler/parcel#2492
• Better Electron support parcel-bundler/parcel#7753
• Error: Cannot find module 'electron-store' in preload.js sindresorhus/electron-store#228

Sandbox Preload scripts

https://www.electronjs.org/docs/latest/tutorial/sandbox#preload-scripts

In order to allow renderer processes to communicate with the main process, preload scripts attached to sandboxed renderers will still have a polyfilled subset of Node.js APIs available. A require function similar to Node's require module is exposed, but can only import a subset of Electron and Node's built-in modules:

• electron (only renderer process modules)
• events
• timers
• url

In addition, the preload script also polyfills certain Node.js primitives as globals:

• Buffer
• process
• clearImmediate
• setImmediate

Because the require function is a polyfill with limited functionality, you will not be able to use CommonJS modules to separate your preload script into multiple files. If you need to split your preload code, use a bundler such as webpack or Parcel.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

90.9% Coverage
0.0% Duplication