docs(security): add guide for ipc with contextIsolation

Author: nklayman

docs/guide/security.md

@@ -25,6 +25,36 @@ window.ipcRenderer = ipcRenderer
 ```
 
 Now, you can access `ipcRenderer` with `window.ipcRenderer` in your Vue app.
+
+If you want to use IPC without `nodeIntegration` and with `contextIsolation`, use this:
+
+```js
+import { contextBridge, ipcRenderer } from 'electron'
+
+// Expose protected methods that allow the renderer process to use
+// the ipcRenderer without exposing the entire object
+contextBridge.exposeInMainWorld('ipcRenderer', {
+  send: (channel, data) => {
+    // whitelist channels
+    let validChannels = ['toMain']
+    if (validChannels.includes(channel)) {
+      ipcRenderer.send(channel, data)
+    }
+  },
+  receive: (channel, func) => {
+    let validChannels = ['fromMain']
+    if (validChannels.includes(channel)) {
+      // Deliberately strip event as it includes `sender`
+      ipcRenderer.on(channel, (event, ...args) => func(...args))
+    }
+  }
+})
+```
+
+Then, you can use `window.ipcRenderer.(send/receive)` in the renderer process.
+
+(Solution from [this StackOverflow answer](https://stackoverflow.com/questions/55164360/with-contextisolation-true-is-it-possible-to-use-ipcrenderer/59675116#59675116))
+
 :::
 
 ## Loading Local Images/Resources