trop[bot] 04614eed17 fix: validate dock_state_ against allowlist before JS execution (#50668) ...

fix: validate dock_state_ against allowlist before JS execution

The dock_state_ member was concatenated directly into a JavaScript
string and executed via ExecuteJavaScript() in the DevTools context.

We should validate against the four known dock states and fall back
to "right" for any unrecognized value for safety

Co-authored-by: trop[bot] <37223003+trop[bot]@users.noreply.github.com>
Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com>

2026-04-03 15:48:04 -05:00

..

app

fix: correct linux zygote process titles (#50533)

2026-03-27 12:24:01 -04:00

browser

fix: validate dock_state_ against allowlist before JS execution (#50668)

2026-04-03 15:48:04 -05:00

common

refactor: remove never-used JS API (#50673)

2026-04-03 15:47:46 -05:00

renderer

feat: make Chrome extensions work on custom protocols (#50530)

2026-04-02 20:09:59 -07:00

services/node

fix: recover network requests after Network Service restart (#49887)

2026-02-25 12:53:06 -05:00

utility

fix: broken OOP window.print() on macOS/Linux (#45214)

2025-01-20 10:23:44 +01:00