From e3109c47180a9ffa17386072093b7cded794e14c Mon Sep 17 00:00:00 2001
From: Devin Binnie <52460000+devinbinnie@users.noreply.github.com>
Date: Thu, 18 Jul 2024 10:35:01 -0400
Subject: [PATCH] [MM-59046] Flip fuses for cookie encryption, node options and
 ASAR integrity (#3094)

---
 scripts/afterpack.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/scripts/afterpack.js b/scripts/afterpack.js
index 1a83d495..10321ca4 100644
--- a/scripts/afterpack.js
+++ b/scripts/afterpack.js
@@ -43,6 +43,11 @@ exports.default = async function afterPack(context) {
                 version: FuseVersion.V1,
                 [FuseV1Options.RunAsNode]: false, // Disables ELECTRON_RUN_AS_NODE
                 [FuseV1Options.EnableNodeCliInspectArguments]: false, // Disables --inspect
+                [FuseV1Options.EnableCookieEncryption]: true,
+                [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false, // Disables NODE_OPTIONS and NODE_EXTRA_CA_CERTS
+                // Can only verify on macOS right now, electron-builder doesn't support Windows ASAR integrity verification
+                [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: context.electronPlatformName === 'darwin' || context.electronPlatformName === 'mas',
+                [FuseV1Options.OnlyLoadAppFromAsar]: true,
             });
 
         if (context.electronPlatformName === 'linux') {