vetkit.js.electron.sandbox-disabled
The Electron renderer sandbox is disabled. This weakens the boundary between web content and the operating system.
Last updated:
Suite: Security
javascript, typescript
The Electron renderer sandbox is disabled. This weakens the boundary between web content and the operating system.
Category: SECURITY · Engine rule severity: INFO
How to fix it
Keep the renderer sandboxed (the default since Electron 20) and move privileged work to the main process.
References
Source: packages/engine/rules/sast/javascript.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.