Electron runs with sandbox disabled #5195
Description
This is a major security hole.
See https://no-sandbox.io/
Metadata
Metadata
Assignees
Labels
Type
Projects
Milestone
Relationships
Development
No branches or pull requests
Participants
{{ message }}
No one assigned
No type
No projects
No milestone
None yet
Activity
zx2c4 commentedon Apr 18, 2021
#4381
stale commentedon Sep 23, 2021
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
garrett commentedon Sep 30, 2021
Additionally, using Flatpak (#1639) would also provide a sandbox on Linux. (Both sandboxes should be enabled. Just pointing out that Signal has at least two sandboxes it could use on Linux and it officially uses neither.)
stale commentedon Dec 29, 2021
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
garrett commentedon Dec 31, 2021
I don't think this has been addressed yet, and is security-related, so it probably should stay open.
stale commentedon Apr 1, 2022
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
zx2c4 commentedon Apr 1, 2022
Still not fixed, right?
stale commentedon Jun 30, 2022
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
garrett commentedon Jun 30, 2022
It still doesn't seem to be addressed, so this isn't stale. Since it's a security issue, it really should be addressed.
stale commentedon Sep 28, 2022
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
garrett commentedon Sep 28, 2022
Still not stale.
apiraino commentedon May 5, 2025
Should this issue be considered fixed? (see comment)