If an app is packaged with asar and the electron app uses a settings json file that I created that includes api key info... is this is a terrible idea related to security? How hard is it for someone to view this json file in plain-text?
electron packaged into asar target windows , config json with api key setting, is safe?
540 Views Asked by jremi At
1
There are 1 best solutions below
Related Questions in JSON
- getting undefined while iterating json
- How can I serialize a numpy array while preserving matrix dimensions?
- What is best way to check if any of the property of object is null or empty?
- How to query JSON data according to JSON array's size with Spark SQL?
- Extracting data from json_decode with lat and lng geolocation
- Convert JSON.gz to JSON in node js
- How do I get the type to convert to when deserializing from Jackson
- Escape dot in jquery validate plugin
- Are allOf and properties keywords interchangeable?
- Sort continents by amount of countries
- Is there a data format lighter than json?
- Object of class CS_REST_Wrapper_Result could not be converted to string in CAMPAIGN MONITOR
- How to read JSON data from a web server running PHP and MySQL?
- Parse Nsmutabledictionary and extract value
- Handle empty JSON values in Java
Related Questions in SECURITY
- Can MVC.NET prevent SQL-injection at razor or controller level?
- Forgotten password reset page: should the user need to enter a username/email as well?
- Dynamic roles list in CustomAuthorize ASP MVC
- Access roles from multiple applications
- How to Fix TLS CBC Incorrect Padding Abuse Vulnerability on Windows 2003 Server
- Evernote Web Clipper and Content Security Policy
- Invalidate user credentials when password changes
- Spring Boot MVC non-role based security
- Correct Captcha behaviour on error
- Is macro more secure than static const if I don't want someone to know or change the hardcode value?
- In Android, ensuring only pre-decided users can only use the app
- Authenticating plain text passwords against md5 hash in DB using Apache Shiro
- Symfony2 - handle HTTP/Entity user access restrictions
- Client side computation without exposing code?
- searchable row level encryption using java?
Related Questions in ELECTRON
- Electron default app doesn't change
- Context menu click/open event with Atom Shell/Electron?
- How to use the <webview> methods in Electron
- Execute createShortcut in a Squirrel event, in an Electron app
- How to watch files in Electron App?
- How to pass command line argument in electron
- ERROR: when installing electron?
- Error messages and console logs in Electron?
- Electron (atom shell) window getting closed on its own after some time
- How to pass the data from one js file to another react.js file
- Run/Install ruby gem from io.js with child_process
- Best way to read from a big CSV file without loading everything to memory using Javascript
- Grouping child processes in node-webkit or atom/electron
- Uncaught Error: process.binding is not supported (when developing in React, fluxible and electron)
- google cloud speech not working in electron package
Related Questions in ASAR
- Why electron app is not able to find correct path to a R file when packaged with asar flag?
- electron-builder MSI installer asar file too large
- problem extracting an app.asar file using the asar command
- Electron/Netralinojs source source code "protection"
- ReferenceError: BigInt is not defined Asar Electron Nodejs
- electron packaged into asar target windows , config json with api key setting, is safe?
- After packaging an electron app (installed with -no--asar) child_process.spawn not working
- Packaging app With Electron and Asar
- How to modify the folder structure of app.asar when using electron-builder?
- Package only certain directories with asar in an Electron application
- Connection mysql credentials ElectronJs
- How do I read decomplied Electron ASAR?
- electron-builder installer: A JavaScript error occurred in the main process, Error: The specified module could not be found
- How to pack app using Asar but exclude Electron
- ASAR Limitations on Node API: spawn a child process
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Asar is nothing more than a simple archive, pretty much anyone can extract and read file inside.
https://github.com/electron/asar#asar---electron-archive :
it works like tar that concatenates all files together without compression