Renderer Backend will not work without access to ipcRenderer

Electron’s security documentation suggest setting:

• nodeIntegration to false
• contextIsolation to true
• using contextBridge (https://www.electronjs.org/docs/api/context-bridge, https://stackoverflow.com/a/57656281/6319004)

The sentry client for the renderer directly requires ipcRenderer (https://github.com/getsentry/sentry-electron/blob/master/src/renderer/backend.ts#L5) as a way to send events to the main process, but with the suggested security settings, this would not be possible (ipcRenderer wouldn’t be available in the renderer process).

Are there any plans to allow us to use sentry in the renderer process without exposing ipcRenderer directly?

If not, would it be possible for us to submit a PR for this?

[bermanboris]

@hibearpanda Hey! According to webpack configuration, it uses src/sentry.js file as preload. I hope this helps.

[timfish]

Last night I was working on a PR for exactly this which exposes IPC through contextBridge when context isolation is enabled.

It’s not a simple change because @sentry/electron still needs to work with context isolation disabled and in versions of Electron before context isolation even existed.

With context isolation enabled, you’ll need to call init in the main process, the renderer preload and in the renderer in the isolated context.