element-hq / element-hq/element-web

macOS sandbox

Open
#32,095 5 comments 0 reactions 0 assignees View on GitHub
A-Electron A-Packaging T-Feature T-Task Z-macOS Z-Platform-Specific
Dominant language
TypeScript
Stars
13.5k
Forks
2.8k
PR merge metrics
PR metrics pending

Description

### Your use case

#### What would you like to do?
Enable macOS app sandbox.
#### Why would you like to do it?
It states [here](https://github.com/element-hq/element-desktop/blob/master/build/entitlements.mac.plist#L7) that the macOS app sandbox is not enabled due to the electron-builder issue. But it was fixed more than 4 years ago. Enabling the sandbox will reduce harm from vulnerabilities such as [GHSA-mjrg-9f8r-h3m7](https://github.com/element-hq/element-desktop/security/advisories/GHSA-mjrg-9f8r-h3m7).
#### How would you like to achieve it?
Enable `com.apple.security.app-sandbox` entitlement.

### Have you considered any alternatives?

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.