corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087aa-63d5-7374-a2b3-a7ce02f18a8f

Bananatron and the disappointing state of Electron app security

muffin.ink · published 12 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at muffin.ink Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
33
Words captured
10,544

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/GarboMuffin/bananatron
github.com
https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html
chromereleases.googleblog.com
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html
chromereleases.googleblog.com
https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_8.html
chromereleases.googleblog.com
https://www.mozilla.org/en-US/security/advisories/mfsa2025-07/
mozilla.org
https://www.mozilla.org/en-US/security/advisories/mfsa2025-01/
mozilla.org
https://www.mozilla.org/en-US/security/advisories/mfsa2024-63/
mozilla.org
https://support.apple.com/en-us/122379
support.apple.com
https://support.apple.com/en-us/122074
support.apple.com
https://support.apple.com/en-us/121846
support.apple.com
https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/input/file
developer.mozilla.org
https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md
chromium.googlesource.com
https://nodejs.org/en
nodejs.org
https://www.electronjs.org
electronjs.org
chromium 153.0.8010.52 Read at the source ↗
chromium.org
https://www.electronjs.org/apps
electronjs.org
VSCodium Read at the source ↗
vscodium.com
https://discord.com
discord.com
https://en.wikipedia.org/wiki/Cross-site_scripting
en.wikipedia.org
https://www.usenix.org/conference/usenixsecurity24/presentation/ali
usenix.org
https://github.com/GarboMuffin/bananatron/blob/master/injector/injector.js
github.com
https://github.com/GarboMuffin/bananatron/tree/master/instrumentation
github.com
https://www.figma.com/downloads/
figma.com
https://www.electronjs.org/docs/latest/tutorial/fuses
electronjs.org
https://install.advancedrestclient.com
install.advancedrestclient.com
https://nodejs.org/api/module.html
nodejs.org
https://www.electronjs.org/docs/latest/tutorial/electron-timelines
electronjs.org
https://altairgraphql.dev
altairgraphql.dev
https://graphql.org
graphql.org
https://buttercup.pw
buttercup.pw
https://github.com/buttercup/buttercup-desktop/blob/cb98fe711b555fb1b0e3f7ffdc3a85cd844d7307/source/renderer/services/auth3rdParty.ts
github.com
https://gist.github.com/perry-mitchell/43ebfcec4d874b77a704be1d4f2262e6
gist.github.com
https://desktop.turbowarp.org/
desktop.turbowarp.org