From 8efab0e72cd900d7405ec4325b160ad3edf2f290 Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Fri, 21 Nov 2025 14:26:50 -0800
Subject: [PATCH 1/2] Add more security flags

---
 binding.gyp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/binding.gyp b/binding.gyp
index 21c96bb..755e1ab 100644
--- a/binding.gyp
+++ b/binding.gyp
@@ -8,6 +8,10 @@
       "sources": [
         "src/iselevated.cc"
       ],
+      "cflags": [
+        "-O2",
+        "-D_FORTIFY_SOURCE=2",
+      ],
       "msvs_configuration_attributes": {
         "SpectreMitigation": "Spectre"
       },
@@ -15,6 +19,7 @@
         "VCCLCompilerTool": {
           "AdditionalOptions": [
             "/guard:cf",
+            "/W3",
             "/we4244",
             "/we4267",
             "/ZH:SHA_256"

From 9ffeb851e10df1aaa301a9b40adecd5c6ada8ed4 Mon Sep 17 00:00:00 2001
From: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Date: Fri, 21 Nov 2025 14:30:17 -0800
Subject: [PATCH 2/2] Also add DYNAMICBASE

---
 binding.gyp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/binding.gyp b/binding.gyp
index 755e1ab..36c936d 100644
--- a/binding.gyp
+++ b/binding.gyp
@@ -27,6 +27,7 @@
         },
         "VCLinkerTool": {
           "AdditionalOptions": [
+            "/DYNAMICBASE",
             "/guard:cf"
           ]
         }