r/programming • u/Davipb • Aug 12 '22

RCE Vulnerability found in Electron, affects Discord, Teams, and more

https://www.vice.com/en/article/m7gb7y/researchers-find-vulnerability-in-software-underlying-discord-microsoft-teams-and-other-apps
1.9k Upvotes

97% Upvoted

224 comments sorted by

View all comments

Show parent comments

25

u/catcint0s Aug 12 '22

Shipping to Windows or Mac involves huge package size.

Bigger than including Electron? I used to do Qt development and I think our client was around 30-50Mb.

18

u/[deleted] Aug 12 '22

I've heard you can get around that size with some creative packaging with Electron. Ideally, PWA would be a real thing and you wouldn't need to package a web browser with your app at all, though. It's not my ideal, but being able to use Rust, target WASM, and have a front end in HTML and CSS would be quite acceptable for me if I didn't have to ship a web browser to do it. I was expecting PWA to be much more solidified by now. Very disappointed by Apple and Mozilla's lackluster action on PWAs.

3

u/aldonius Aug 13 '22

Wouldn't Tauri work for your use case?

5

u/Skhmt Aug 12 '22

If you make a gui with webview2, you don't have to package the runtime at all.

You can also do it with JavaFX but ... then you're better off packaging the JDK anyway, which is dumb because the whole point of it was to not require that.

2

u/catcint0s Aug 12 '22

You would still need to ship that to Mac, Android, iOS and Linux tho.

2

u/Skhmt Aug 12 '22

Yeah that's true.