mirror of
https://github.com/electron/electron.git
synced 2026-05-02 03:00:22 -04:00
fix: strictly validate sender for internal IPC reply channels (#50118) The sender-mismatch check in invokeInWebContents and invokeInWebFrameMain used a negative condition (`type === 'frame' && sender !== expected`), which only rejected mismatched frame senders and accepted anything else. Invert to a positive check so only the exact expected frame can resolve the reply — matches the guard style used elsewhere in lib/browser/. Co-authored-by: Samuel Attard <sam@electronjs.org>