Hacker News Reader

Since electron is basically a headless browser, you would be opening up any app with an XSS vulnerability to any other app running in the runtime.

Headless? It even has the same debug console as the ordinary Chromium.

Basically the only thing it misses is the URL bar and navigation buttons. It's just a browser with some OS integration slapped on the side.

True, I’ve always thought of electron as phonegap/Cordova for desktops.

So it needs a isolation like firefox containers