Using node-webkit as a Site Specific Browser, + few questions

[Goran Stanković]

Hi,

I downloaded v0.5.1 prebuilt binaries and played around with it a bit for a role of a site specific browser. The thing is... I have a web-app for which I wan't to offer a configured SSB for download so that users can use it only for accessing that site and have taskbar switching functionality. It works nice but I'm concerned about security since I don't know much about node.js. I'd be grateful for any help about this questions:

1. I've read wiki about security (https://github.com/rogerwang/node-webkit/wiki/Security) and some related discussions but I didn't understood it well. If I create a index.html file and inside I redirect the location to my site, is that site sandboxed?

2. What's happening with session cookies? Let's say i run my app and login into it. On other browsers if I close the window client session is destroyed and I have to login again when visiting again, with node-webkit if I start the app again it doesn't ask for a login. I suppose the session is restored. Is there a way to disable that kind of behavior?

3. Is there something else that I'm overseeing in using node-webkit as a SSB.

Thanks,

Goran