Description
Detects web content that exploits CVE-2018-1000136, a weakness in Electron applications that lets a page enable Node.js integration on a WebView through the webpreferences attribute. A successful bypass turns cross-site scripting into full local code execution inside the Electron application, since the renderer gains Node.js privileges.
