fuses

@電子/保險絲

翻轉電子保險絲並自定義您包裝的電子構建

用法

通過JavaScript

 import { flipFuses , FuseVersion , FuseV1Options } from '@electron/fuses' ;

// During your build / package process
await flipFuses (
  require ( 'electron' ) , // Returns the path to the electron binary
  {
    version : FuseVersion . V1 ,
    [ FuseV1Options . RunAsNode ] : false , // Disables ELECTRON_RUN_AS_NODE
    [ FuseV1Options . EnableCookieEncryption ] : true , // Enables cookie encryption
    [ FuseV1Options . EnableNodeOptionsEnvironmentVariable ] : false , // Disables the NODE_OPTIONS environment variable
    [ FuseV1Options . EnableNodeCliInspectArguments ] : false , // Disables the --inspect and --inspect-brk family of CLI options
    [ FuseV1Options . EnableEmbeddedAsarIntegrityValidation ] : true , // Enables validation of the app.asar archive on macOS
    [ FuseV1Options . OnlyLoadAppFromAsar ] : true , // Enforces that Electron will only load your app from "app.asar" instead of its normal search paths
    [ FuseV1Options . LoadBrowserProcessSpecificV8Snapshot ] : true , // Loads V8 Snapshot from `browser_v8_context_snapshot.bin` for the browser process
    [ FuseV1Options . GrantFileProtocolExtraPrivileges ] : true , // Grants the file protocol extra privileges
  } ,
) ;

從命令行

$ npx @electron/fuses read --app /Applications/Foo.app
$ npx @electron/fuses write --app /Applications/Foo.app < ...key=on/off >

蘋果矽

對於arm64 MACOS構建應用程序，如果您在翻轉保險絲後沒有立即代碼應用程序，則需要通過resetAdHocDarwinSignature: true to flipFuses方法。否則，該應用將拒絕使用代碼簽名驗證錯誤啟動。這是蘋果矽設備上的新安全措施。

 import { flipFuses , FuseVersion , FuseV1Options } from '@electron/fuses' ;

await flipFuses (
  require ( 'electron' ) ,
  {
    version : FuseVersion . V1 ,
    resetAdHocDarwinSignature : targetPlatform === 'darwin' && targetArch === 'arm64' ,
    [ FuseV1Options . RunAsNode ] : false ,
  } ,
) ;

新的保險絲

如果要確保為每種保險絲提供配置，甚至在電子升級期間新添加的保險絲，則可以將strictlyRequireAllFuses選項設置為true 。如果您使用的是@electron/fuses的版本，那將難以使構建失敗電子二進制您的目標。

 import { flipFuses , FuseVersion , FuseV1Options } from '@electron/fuses' ;

await flipFuses (
  require ( 'electron' ) ,
  {
    version : FuseVersion . V1 ,
    strictlyRequireAllFuses : true ,
    [ FuseV1Options . RunAsNode ] : false ,
  } ,
) ;