feat: add fuses for ASAR integrity validation

electron · Sep 9, 2021 · bd6ba56 · bd6ba56
1 parent 6a835de
commit bd6ba56
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -17,6 +17,8 @@ await flipFuses(
     [FuseV1Options.EnableCookieEncryption]: true, // Enables cookie encryption
     [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false, // Disables the NODE_OPTIONS environment variable
     [FuseV1Options.EnableNodeCliInspectArguments]: false, // Disables the --inspect and --inspect-brk family of ClI options
+    [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: true, // Enables validation of the app.asar archive on macOS
+    [FuseV1Options.OnlyLoadAppFromAsar]: true, // Enforces that Electron will only load your app from "app.asar" instead of it's normall search paths
   },
 );
 ```

diff --git a/src/config.ts b/src/config.ts
@@ -10,6 +10,8 @@ export enum FuseV1Options {
   EnableCookieEncryption = 1,
   EnableNodeOptionsEnvironmentVariable = 2,
   EnableNodeCliInspectArguments = 3,
+  EnableEmbeddedAsarIntegrityValidation = 4,
+  OnlyLoadAppFromAsar = 5,
 }
 
 export type FuseV1Config<T = boolean> = {

diff --git a/src/index.ts b/src/index.ts
@@ -27,6 +27,8 @@ const buildFuseV1Wire = (config: FuseV1Config, wireLength: number) => {
     state(config[FuseV1Options.EnableCookieEncryption]),
     state(config[FuseV1Options.EnableNodeOptionsEnvironmentVariable]),
     state(config[FuseV1Options.EnableNodeCliInspectArguments]),
+    state(config[FuseV1Options.EnableEmbeddedAsarIntegrityValidation]),
+    state(config[FuseV1Options.OnlyLoadAppFromAsar]),
   ];
 };