-
Chromium RCE Vulnerability Fix
A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the sandbox option is enabled.
We’ve published two new versions of electron
1.7.8and1.6.14, both of which include a fix for this vulnerability. We urge all Electron developers to update their apps to the latest stable version immediately:npm i electron@latest --save-devTo learn more about best practices for keeping your Electron apps secure, see our security tutorial.
Please contact electron@github.com if you wish to report a vulnerability in Electron.
-
Announcing TypeScript support in Electron
The
electronnpm package now includes a TypeScript definition file that provides detailed annotations of the entire Electron API. These annotation can improve your Electron development experience even if you’re writing vanilla JavaScript. Justnpm install electronto get up-to-date Electron typings in your project. -
Project of the Week: Jasper
This week we interviewed the creator of Jasper, an Electron-based tool for managing GitHub notifications.
-
Project of the Week: WebTorrent
This week we caught up with @feross and @dcposch to talk about WebTorrent, the web-powered torrent client that connects users together to form a distributed, decentralized browser-to-browser network.
-
Touch Bar Support
The Electron 1.6.3 beta release contains initial support for the macOS Touch Bar.
-
Project of the Week: Voltra
This week we met with Aprile Elcich and Paolo Fragomeni to talk about Voltra, an Electron-powered music player.
-
Electron Internals: Building Chromium as a Library
Electron is based on Google’s open-source Chromium, a project that is not necessarily designed to be used by other projects. This post introduces how Chromium is built as a library for Electron’s use, and how the build system has evolved over the years.
-
Project of the Week: WordPress Desktop
This week we caught up with folks at Automattic to talk about WordPress Desktop, an open-source desktop client for managing WordPress content.
-
Project of the Week: Dat
This week’s featured project is Dat, a grant-funded, open source, decentralized tool for distributing data sets. Dat is built and maintained by a geodistributed team, many of whom helped write this post.
-
Project of the Week: Ghost
This week we chatted with Felix Rieseberg, desktop engineer at Slack and maintainer of Ghost Desktop, an Electron client for the Ghost publishing platform.
-
Project of the Week: Beaker Browser
This week we caught up with Paul Frazee, creator of Beaker Browser. Beaker is an experimental peer-to-peer web browser that uses the Dat protocol to host sites from users’ devices.
-
Project of the Week: Kap
The Electron community is growing quickly, and people are creating powerful new apps and tools at an astounding rate. To celebrate this creative momentum and keep the community informed of some of these new projects, we’ve decided to start a weekly blog series featuring noteworthy Electron-related projects.
-
Electron Simple Samples
We recently hosted an Electron hackathon at GitHub HQ for members of Hackbright Academy, a coding school for women founded in San Francisco. To help attendees get a head start on their projects, our own Kevin Sawicki created a few sample Electron applications.
-
Electron Userland
We’ve added a new userland section to the Electron website to help users discover the people, packages, and apps that make up our flourishing open-source ecosystem.
-
Certificate Transparency Fix
Electron 1.4.12 contains an important patch that fixes an upstream Chrome issue where some Symantec, GeoTrust, and Thawte SSL/TLS certificates are incorrectly rejected 10 weeks from the build time of libchromiumcontent, Electron’s underlying Chrome library. There are no issues with the certificates used on the affected sites and replacing these certificates will not help.
-
September 2016: New Apps
Here are the new Electron apps and talks that were added to the site in September.
-
Electron's API Docs as Structured Data
Today we’re announcing some improvements to Electron’s documentation. Every new release now includes a JSON file that describes all of Electron’s public APIs in detail. We created this file to enable developers to use Electron’s API documentation in interesting new ways.
-
Electron Internals: Weak References
As a language with garbage collection, JavaScript frees users from managing resources manually. But because Electron hosts this environment, it has to be very careful avoiding both memory and resources leaks.
This post introduces the concept of weak references and how they are used to manage resources in Electron.
-
August 2016: New Apps
Here are the new Electron apps that were added to the site in August.
-
Accessibility Tools
Making accessible applications is important and we’re happy to introduce new functionality to Devtron and Spectron that gives developers the opportunity to make their apps better for everyone.
-
npm install electron
As of Electron version 1.3.1, you can
npm install electron --save-devto install the latest precompiled version of Electron in your app. -
Electron Internals: Using Node as a Library
This is the second post in an ongoing series explaining the internals of Electron. Check out the first post about event loop integration if you haven’t already.
Most people use Node for server-side applications, but because of Node’s rich API set and thriving community, it is also a great fit for an embedded library. This post explains how Node is used as a library in Electron.
-
July 2016: New Apps and Meetups
We’re starting a monthly roundup to highlight activity in the Electron community. Each roundup will feature things like new apps, upcoming meetups, tools, videos, etc.
-
Electron Internals: Message Loop Integration
This is the first post of a series that explains the internals of Electron. This post introduces how Node’s event loop is integrated with Chromium in Electron.
-
Electron Podcasts
Looking for an introduction to Electron? Two new podcasts have just been released that give a great overview of what it is, why it was built, and how it is being used.
-
Electron 1.0
For the last two years, Electron has helped developers build cross platform desktop apps using HTML, CSS, and JavaScript. Now we’re excited to share a major milestone for our framework and for the community that created it. The release of Electron 1.0 is now available from electron.atom.io.
-
What's new in Electron 0.37
Electron
0.37was recently released and included a major upgrade from Chrome 47 to Chrome 49 and also several new core APIs. This latest release brings in all the new features shipped in Chrome 48 and Chrome 49. This includes CSS custom properties, increased ES6 support,KeyboardEventimprovements,Promiseimprovements, and many other new features now available in your Electron app. -
Use V8 and Chromium Features in Electron
Building an Electron application means you only need to create one codebase and design for one browser, which is pretty handy. But because Electron stays up to date with Node.js and Chromium as they release, you also get to make use of the great features they ship with. In some cases this eliminates dependencies you might have previously needed to include in a web app.
-
API Changes Coming in Electron 1.0
Since the beginning of Electron, starting way back when it used to be called Atom-Shell, we have been experimenting with providing a nice cross-platform JavaScript API for Chromium’s content module and native GUI components. The APIs started very organically, and over time we have made several changes to improve the initial designs.
-
Mac App Store and Windows Auto Updater on Electron
Recently Electron added two exciting features: a Mac App Store compatible build and a built-in Windows auto updater.
-
What's New in Electron
There have been some interesting updates and talks given on Electron recently, here’s a roundup.
-
Electron Meetup at GitHub HQ
Join us September 29th at GitHub’s HQ for an Electron meetup hosted by Atom team members @jlord and @kevinsawicki. There will be talks, food to snack on, and time to hangout and meet others doing cool things with Electron. We’ll also have a bit of time to do lightning talks for those interested. Hope to see you there!
-
Electron Documentation
This week we’ve given Electron’s documentation a home on electron.atom.io. You can visit /docs/latest for the latest set of docs. We’ll keep versions of older docs, too, so you’re able to visit /docs/vX.XX.X for the docs that correlate to the version you’re using.
-
Atom Shell is now Electron
Atom Shell is now called Electron. You can learn more about Electron and what people are building with it at its new home electron.atom.io.
zeke
kevinsawicki
zcbenz
haacked
jlord