diff options
| author | Andrej Mihajlov <and@mullvad.net> | 2021-12-17 14:37:12 +0100 |
|---|---|---|
| committer | Andrej Mihajlov <and@mullvad.net> | 2021-12-17 14:37:12 +0100 |
| commit | 209cc97133e16286e86ab919fcbbbfeba66d4b11 (patch) | |
| tree | 36d24677e6d35ca14ef9675d954700d1c5ec4d20 | |
| parent | fb1cc6d3c1c6e3b219974e235a94e062ece5d1ce (diff) | |
| parent | efe54e57245a5c5746493024a4bf2591a7ec1bc6 (diff) | |
| download | mullvadvpn-209cc97133e16286e86ab919fcbbbfeba66d4b11.tar.xz mullvadvpn-209cc97133e16286e86ab919fcbbbfeba66d4b11.zip | |
Merge branch 'disable-chrome-dns-resolver'
| -rw-r--r-- | CHANGELOG.md | 4 | ||||
| -rw-r--r-- | gui/src/main/index.ts | 7 |
2 files changed, 11 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 66500519a6..34c22f9ae3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -55,6 +55,10 @@ Line wrap the file at 100 chars. Th - Always kill `sslocal` if the tunnel monitor fails to start when using bridges. - Show relay location constraint correctly in the CLI when it is set to `any`. +#### macOS +- Disable built-in DNS resolver in Electron. Prevents Electron from establishing connections to + DNS servers set in system network preferences. + #### Windows - Fix app size after changing display scale. - Fix daemon not starting if all excluded app paths reside on non-existent/unmounted volumes. diff --git a/gui/src/main/index.ts b/gui/src/main/index.ts index ede8384e67..5bce63cc2d 100644 --- a/gui/src/main/index.ts +++ b/gui/src/main/index.ts @@ -463,6 +463,13 @@ class ApplicationMain { } private onReady = async () => { + // Disable built-in DNS resolver. + app.configureHostResolver({ + enableBuiltInResolver: false, + secureDnsMode: 'off', + secureDnsServers: [], + }); + // There's no option that prevents Electron from fetching spellcheck dictionaries from // Chromium's CDN and passing a non-resolving URL is the only known way to prevent it from // fetching. https://github.com/electron/electron/issues/22995 |