Electron Releases

• A link opened into a new window (modifier-click, middle-click, target form post) is treated like window.open(): a <webview> without allowpopups no longer opens it.
• The window created for such a link starts its navigation from the original request (initiator origin and frame, renderer-initiated, user gesture, post body) instead of a fresh browser-initiated loadURL, so Sec-Fetch-Site, did-start-navigation initiator and related attribution describe the clicking document.
• Docs: allowpopups covers links opened into new windows.

Notes: <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load.