electron

0 Fork 0

mirror of https://github.com/electron/electron.git synced 2026-10-28 11:44:46 +08:00

Files

T

Samuel Attard 8cc20cf659 fix: check the sending frame for internal guest, window and reply IPCs (#53684 )

* fix: check the sending frame for internal guest, window and reply IPCs

* guest-view IPCs (attach/detach/call/property get/set) are honoured only
  from the frame that created the <webview>, not from any frame in the
  embedder WebContents
* window.close() via the internal IPC is honoured only from the top-level
  document, and the renderer override is installed for the main frame only
* replies to webContents.executeJavaScript()/insertCSS() and friends are
  accepted only from the main frame they were sent to
* webContents.sendToFrame() only addresses frames that belong to that
  WebContents
* the <webview> `ipc-message` event carries `frameOrigin` / `frameUrl` of the
  frame in the guest that sent it
* process.getProcessMemoryInfo() reports the calling frame's own process
* docs: validateSender example checks senderFrame.origin

* docs: add API history PR reference

* refactor: drop frameOrigin/frameUrl from the webview ipc-message event

2026-09-07 15:49:53 -07:00

browser

fix: check the sending frame for internal guest, window and reply IPCs (#53684 )

2026-09-07 15:49:53 -07:00

common

fix: settle pending upload stream reads when a net.request ends (#53341 )

2026-09-01 08:31:41 -07:00

isolated_renderer

build: add oxfmt for JS/TS formatting and import sorting (#50692 )

2026-04-12 02:03:04 -07:00

node

refactor: hand crashpad env to run-as-node children from lib/node/init (#53527 )