Node.js Integration must not be enabled in any renderer that loads remote content to avoid remote code execution attacks.
Rule Source Code