EXPERIMENTAL_FEATURES_HTML_CHECK

EXPERIMENTAL_FEATURES_HTML_CHECK - Do not use Chromium’s experimental features

The experimentalFeatures and experimentalCanvasFeatures flags can be used to enable Chromium’s experimental features, which increase the overall attack surface for production applications.

---

Risk

Experimental features may introduce bugs and increase the application attack surface.

Auditing

Search for experimentalFeatures and experimentalCanvasFeatures flags set to true within the webPreferences of webview tags:

<webview src="https://doyensec.com" webpreferences="experimentalCanvasFeatures=true"></webview>

References

• https://electronjs.org/docs/all#8-do-not-enable-experimental-features