From 83a9d21d3433af46c47a8b3d1dc59ac0670fec2c Mon Sep 17 00:00:00 2001 From: Yuya Ochiai Date: Wed, 25 Jan 2017 23:24:15 +0900 Subject: [PATCH] Delete global.Buffer in preload script http://electron.atom.io/docs/tutorial/security/#buffer-global --- src/browser/webview/mattermost.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/browser/webview/mattermost.js b/src/browser/webview/mattermost.js index e95b2aab..d7497bec 100644 --- a/src/browser/webview/mattermost.js +++ b/src/browser/webview/mattermost.js @@ -8,6 +8,8 @@ window.eval = global.eval = () => { throw new Error('Sorry, Mattermost does not support window.eval() for security reasons.'); }; +Reflect.deleteProperty(global.Buffer); // http://electron.atom.io/docs/tutorial/security/#buffer-global + function hasClass(element, className) { var rclass = /[\t\r\n\f]/g; if ((' ' + element.className + ' ').replace(rclass, ' ').indexOf(className) > -1) {