This is a backport PR for branch 43-x-y
#53726: fix: check the sending frame for internal guest, window and reply IPCs (43-x-y)
Merged
Created: Sep 7, 2026, 5:53:19 PM
Merged: Sep 7, 2026, 7:26:47 PM
1 comments
Target: 43-x-y
Backport of #53684
See that PR for details.
Notes: Internal <webview>, window.close() and executeJavaScript reply IPCs are validated against the sending frame.
Backport Information
Original PR Author
MarshallOfSoundOriginal PR Status
Merged
Original PR Merged At
Sep 7, 2026, 5:49:54 PM
Original PR Link
View on GitHubSemver Impact
Major
Breaking changes
Minor
New features
Patch
Bug fixes
None
Docs, tests, etc.
Semantic Versioning helps users understand the impact of updates:
- Major (X.y.z): Breaking changes that may require code modifications
- Minor (x.Y.z): New features that maintain backward compatibility
- Patch (x.y.Z): Bug fixes that don't change the API
- None: Changes that don't affect using facing parts of Electron