CVE-2018-15685

mitigation1.js

mainWindow.webContents.on('new-window', e => e.preventDefault())

mitigation2.js

const enforceInheritance = (topWebContents) => {
  const handle = (webContents) => {
    webContents.on('new-window', (event, url, frameName, disposition, options) => {
      if (!options.webPreferences) {
        options.webPreferences = {}
      }
      Object.assign(options.webPreferences, topWebContents.getLastWebPreferences())
      if (options.webContents) {
        handle(options.webContents)
      }
    })
  }
  handle(topWebContents)
}

enforceInheritance(mainWindow.webContents)

payload.js

open('about:blank').open('data:text/html,<script>document.write(process.cwd())</script>') 

webPreferences.js

win.webPreferences = { 
  allowRunningInsecureContent: false, 
  contextIsolation: true,
  nodeIntegration: false,
	nativeWindowOpen: true
}