mirror of
https://github.com/electron/electron.git
synced 2026-05-02 03:00:22 -04:00
fix: validate dock_state_ against allowlist before JS execution The dock_state_ member was concatenated directly into a JavaScript string and executed via ExecuteJavaScript() in the DevTools context. We should validate against the four known dock states and fall back to "right" for any unrecognized value for safety