I've just came across this CVE-2018-1000136 on site below.
https://www.bleepingcomputer.com/news/security/security-flaw-impacts-electron-based-apps-such-as-skype-github-discord-others/
Since brave is based on electron, is it affected by this bug ?
cc @diracdeltas
We knew about this before public disclosure and can confirm we were not affected. We use Chromium's implementation of window.open, not Electron's. Thanks for asking!
The article has been amended to inform the reader that Brave is not affected.
Most helpful comment
We knew about this before public disclosure and can confirm we were not affected. We use Chromium's implementation of window.open, not Electron's. Thanks for asking!