Electron Releases

Features

• Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53700 ^{(Also in 43, 44)}

• Added the ELECTRON_DEBUG_DRAGGABLE_REGIONS environment variable, which visualizes and logs draggable regions in unpackaged apps to help debug custom title bars. #53626 ^{(Also in 43, 44)}

Fixes

• Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53742 ^{(Also in 44)}

• Fixed Ctrl+Y not yanking text killed with Ctrl+K in text fields on macOS. #53715 ^{(Also in 44)}

• Fixed Window Controls Overlay CSS environment variables and navigator.windowControlsOverlay not being populated for WebContentsViews in a BaseWindow. #53811 ^{(Also in 44)}

• Fixed <select> dropdowns not rendering in offscreen windows on macOS. #53716

• Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53817 ^{(Also in 43, 44)}

• Fixed webContents emitting unresponsive right after the system wakes from sleep on Windows, and emitting responsive when a hung window was hidden rather than when it recovered. #53760 ^{(Also in 44)}

• Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53775

• Fixed a possible hang when pressing Esc while a <webview> is fullscreen. #53744

• Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53748 ^{(Also in 43, 44)}

• Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53805

• Internal <webview>, window.close() and executeJavaScript reply IPCs are validated against the sending frame. #53724 ^{(Also in 42, 43, 44)}

• <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load. #53717 ^{(Also in 42, 43, 44)}

• getUserMedia with chromeMediaSource: 'desktop' no longer accepts WebContents source ids; use chromeMediaSource: 'tab' with webContents.getMediaSourceId() or setDisplayMediaRequestHandler to capture a WebContents. #53708 ^{(Also in 42, 43, 44)}

• nodeIntegrationInWorker now applies only to workers created by frames that themselves have Node integration; enable nodeIntegrationInSubFrames to keep Node in workers created by subframes. #53706 ^{(Also in 42, 43, 44)}

Other Changes

• Backported fixes from upstream Chromium and V8. #53765

• Fixed V8 code caching for https scripts loaded by file:// and custom-scheme pages. #53746 ^{(Also in 44)}

• Fixed a renderer crash that could occur when printing from an iframe. #53763 ^{(Also in 43, 44)}

• Updated Node.js to v24.21.0. #53780