According to the official doc, "websecurity:true" is the default setting.
However, in my app, the SOP seems like not working.
"electron": "