diff --git a/preload.js b/preload.js
index 286818a33..ea520d47f 100644
--- a/preload.js
+++ b/preload.js
@@ -19,8 +19,10 @@ window.config.localeMessages = ipc.sendSync('locale-data');
 
 window.setBadgeCount = count => ipc.send('set-badge-count', count);
 
-// We never do this in our code, so we'll prevent it everywhere
+// We never do these in our code, so we'll prevent it everywhere
 window.open = () => null;
+// eslint-disable-next-line no-eval, no-multi-assign
+window.eval = global.eval = () => null;
 
 window.drawAttention = () => {
   console.log('draw attention');