Hacker News Reader

> security issues that make Electron bad

Exposing a HTTP port with application state is a million times worse for security

The server binds to the loopback interface, so it's not exposed to the network at all. Then as long as you use CSRF protection and an appropriate Content Security Policy it is safe.

Reply on news.ycombinator.com