Keeley Hammond cf80d75e2e fix: don't expose chrome.webstorePrivate to web pages (#53752) ...

Since the webstorePrivate API moved to //extensions (CL 7874276), the
core feature files expose it to web pages on the Chrome Web Store origin
and the core provider registers its functions. Electron does not provide
a WebstorePrivateAPIDelegate, so a webContents that navigated to
chromewebstore.google.com got chrome.webstorePrivate bindings and calling
into them dereferenced a null delegate in the browser process.

Override the core "webstorePrivate" feature so it is unavailable in every
context, and replace the core-registered functions with ones that respond
with an error so a stray request cannot crash the browser.

2026-09-09 08:59:59 -04:00

..

app

build: remove six obsolete Node.js patches (#53524)

2026-09-04 21:09:08 +00:00

browser

fix: don't expose chrome.webstorePrivate to web pages (#53752)

2026-09-09 08:59:59 -04:00

common

fix: don't expose chrome.webstorePrivate to web pages (#53752)

2026-09-09 08:59:59 -04:00

renderer

fix: gate preload and worker Node integration on the creating frame (#53686)

2026-09-07 19:26:04 +00:00

services/node

refactor: messagePort managed by cppgc (#53464)

2026-09-04 15:12:13 +09:00

utility

chore: bump chromium to 154.0.8035.0 (main) (#53292)

2026-08-31 11:50:02 -07:00