Experimental Blink Features Enabled
Description
Blink's experimental features are enabled in this application. Some of the features may affect the security of the application.
Examples
Insecure Code
javascript
new BrowserWindow({webPreferences: {enableBlinkFeatures: '...'}})Secure Code
javascript
new BrowserWindow({webPreferences: {enableBlinkFeatures: ''}})Remediation
Disable experimental Blink features by removing or setting enableBlinkFeatures to a secure value.
Rule Details
| Field | Value |
|---|---|
| ID | CODE-0368 |
| Category | InsecureConfig |
| Severity | MEDIUM |
| CWE | CWE-272 |
| Confidence | MEDIUM |
| Impact | MEDIUM |
| Likelihood | MEDIUM |
| Exploitability | MODERATE |
| Tags | security-misconfiguration |
| OWASP | A6:2017-Security Misconfiguration, A05:2021-Security Misconfiguration |