Upgrade Electron to address CVEs. Bump version to 0.5.0

Author: jcrowthe

app/index.js

@@ -74,7 +74,7 @@ function createWindow() {
 'nodeIntegration': false,
 'sandbox': true,
 'disableBlinkFeatures': 'Auxclick',
-'contextIsolation': false,
+'contextIsolation': true,
 'preload': path.join(__dirname, 'preload.js')
 }
 });
@@ -144,7 +144,6 @@ function createWindow() {
 }
 
 function startServer() {
-console.log(server.listening)
 if (server.listening != true) {
 server.listen({
 host: '127.0.0.1',

app/package-lock.json

@@ -1,7 +1,7 @@
 {
  "name": "cryptr",
  "author": "Jacob Crowther <crowther@adobe.com>",
- "version": "0.4.0",
+ "version": "0.5.0",
  "description": "A GUI for Vault",
  "repository": {
  "url": "https://github.com/jcrowthe/cryptr.git"

app/package.json

@@ -1,33 +1,34 @@
 const { ipcRenderer } = require('electron')
+const { contextBridge } = require('electron')
 
-window.startOIDCServer = function() {
+contextBridge.exposeInMainWorld('startOIDCServer', function() {
  ipcRenderer.send("start-oidc", "start");
-}
+});
 
-window.stopOIDCServer = function() {
+contextBridge.exposeInMainWorld('stopOIDCServer', function() {
  ipcRenderer.send("stop-oidc", "stop");
-}
+});
 
-window.openOIDCURL = function(url) {
+contextBridge.exposeInMainWorld('openOIDCURL', function(url) {
  ipcRenderer.send("open-oidc-url", url);
-}
+});
 
 
-window.onOIDCAuthData = function(callback) {
+contextBridge.exposeInMainWorld('onOIDCAuthData', function(callback) {
  authData = callback
-}
+});
 
-window.onOIDCAuthError = function(callback) {
+contextBridge.exposeInMainWorld('onOIDCAuthError', function(callback) {
  authError = callback
-}
+});
 
-window.onOIDCAuthStartError = function(callback) {
+contextBridge.exposeInMainWorld('onOIDCAuthStartError', function(callback) {
  authStartError = callback
-}
+});
 
-window.onOIDCAuthStartSuccess = function(callback) {
+contextBridge.exposeInMainWorld('onOIDCAuthStartSuccess', function(callback) {
  authStartSuccess = callback
-}
+});
 
 ipcRenderer.on('oidc-auth-data', (event, arg) => {
  if (authData) authData(arg);

app/preload.js

@@ -1,7 +1,7 @@
 {
  "name": "cryptr",
  "author": "Jacob Crowther <crowther@adobe.com>",
- "version": "0.4.0",
+ "version": "0.5.0",
  "description": "A GUI for Vault",
  "main": "app/index.js",
  "repository": {
@@ -19,8 +19,8 @@
  "chai": "^3.5.0",
  "chai-as-promised": "^5.3.0",
  "cross-env": "^5.2.1",
- "electron": "^4.2.12",
- "electron-builder": "^22.3.2",
+ "electron": "^15.1.2",
+ "electron-builder": "^22.13.1",
  "electron-prebuilt": "^1.4.13",
  "mocha": "^5.2.0"
  },