Electron Releases

• A cross-origin iframe can no longer request more File System Access permission than it already has (the third-party check compared the requester with itself); matches Chrome.
• file-system-access-restricted is emitted once per requesting document, with details.frame and details.webContents, instead of once per path with the first requester's origin.
• Active grants for an origin are reset shortly after its last top-level document closes or navigates away, and kept while another is open; the helper that drives this was never attached.
• In-memory partitions get a File System Access permission context; without one, write access was always denied and the handlers never ran.

Notes: File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions.