Securing Electron Apps: A Practical Guide

The Electron Security Problem

Electron apps are essentially web pages with Node.js access. This is a terrifying combination if not sandboxed correctly.

Critical Defenses in GitSwitch

1. ▹Context Isolation: Enabled. This ensures the preload script runs in a separate context.
2. ▹Sandbox: Enabled. Renderers have no Node.js access.
3. ▹IPC Security: We use strict ipcMain.handle and ipcRenderer.invoke patterns with validated channels.

Handling Secrets

Never store secrets in localStorage. GitSwitch uses the OS native Keychain (via keytar) to store GitHub Personal Access Tokens, ensuring they are encrypted at rest.