Files
Keeley Hammond af4f835276 fix: strictly validate sender for internal IPC reply channels (#50160)
fix: strictly validate sender for internal IPC reply channels (#50118)

The sender-mismatch check in invokeInWebContents and invokeInWebFrameMain
used a negative condition (`type === 'frame' && sender !== expected`),
which only rejected mismatched frame senders and accepted anything else.

Invert to a positive check so only the exact expected frame can resolve
the reply — matches the guard style used elsewhere in lib/browser/.

Co-authored-by: Samuel Attard <sam@electronjs.org>
2026-03-10 11:09:42 +00:00
..
2025-11-20 10:13:44 -05:00