secure-electron-template

I solved this in a repository I made a few years back. By switching languages, .missing.json files are generated with the words that don't have the other-language equivalent. Then, you run this script which calls the google translate API to generate the translations. https://github.com/reZach/secure-electron-template/blob/mast... Granted, it still suffers that it's not a human translator, but it doesn't require a LLM.

> #6 - Security "Tauri is very secure by default, on the other hand I can't say the same about Electron... With Electron you have full access to Node APIs, so a hacker could easily exploit the very powerful Node APIs." It's fair to believe this, given there's so much material out on the web affirming the fact. I've written about this at length in other places; applications with Electron pre version 5 [0] (released April 2019) were not secure. It's entirely possible and easy to build a secure Electron app today. I started building a secure app Electron template in 2020 [1] (that I still maintain) to address this security issue. I've also written about a history of the framework [2] and steps to build your own Electron app with today's best practices [3]. [0] - https://github.com/electron/electron/releases/tag/v5.0.0 [1] - https://github.co

A lots of fun things, feel free to connect with me on Github if anyone would like to chip in and help: - An Electron template with built-in secure features. I regularly maintain and update the template so it's supported with newer versions of packages. - A collection of free, public-domain recipes. I've wanted to do some version of this for _years_, but am finally getting around to do it again. This time, I'm paying chefs to create recipes for me that will be licensed as public domain. [0] - https://github.com/reZach/secure-electron-template [1] - https://github.com/reZach/open-recipe-project

That's a common refrain I hear that Electron apps aren't secure. It was more true in the past and less-so now. I've been maintaining a secure Electron template for 2 years that's got traction in the community, if you are interested - https://github.com/reZach/secure-electron-template.

I've built secure-electron-template [0] which is a secure-by-default Electron template for writing apps. I made it open source because I'm not motivated to build this for a profit (then it becomes work). The project is sustainable because it's a template, and once people decide to use it, they make their own changes to their app. It's assumed a template is, a template. This doesn't make me any extra work besides fixing bugs here and there or improving things at my own pace. [0]: https://github.com/reZach/secure-electron-template

secure-electron-template [0], a secure-by-default Electron template. 0: https://github.com/reZach/secure-electron-template

I have a few, no desire to monetize. Just built them to help! Tired of copying rows from Excel files into SQL insert statements? Try using this VS code extension: https://github.com/reZach/listtosql An Electron template with security practices baked-in: https://github.com/reZach/secure-electron-template Print out your own recipe cards: https://github.com/reZach/recipe-cards

Needless self-promotion; this is why I came up with this template, to build secure electron apps. It is obvious that current industry has not caught up with secure practices for Electron apps, and I hope this template can help people in their endeavors. https://github.com/reZach/secure-electron-template *contextIsolation is turned on in this template, so the RCE as described in the article is prevented.

Thanks for offering to contribute to open source! I own the secure electron template open-source library. It's a template for building secure electron apps. There are a few low priority issues if you'd like to work on them. Otherwise, there are various dependencies such as context menus, i18n support, etc that could use new features if you want to think of some that could be useful. https://github.com/reZach/secure-electron-template

Your concerns about security with regard to Electron apps is real. So much so that for the new project I'm working on, I spent a few months building https://github.com/reZach/secure-electron-template, which is an OSS secure electron template that fixes up the security holes so you don't have to worry about it.