trop[bot] be53e0a470 fix: propagate requesting frame through sync permission checks (#50686) ...

WebContentsPermissionHelper::CheckPermission was hardcoding
GetPrimaryMainFrame() and deriving the requesting origin from
web_contents_->GetLastCommittedURL(), so the setPermissionCheckHandler
callback always received the top frame's origin and
details.isMainFrame/details.requestingUrl always reflected the main
frame, even when a cross-origin subframe with allow="serial" or
allow="camera; microphone" triggered the check.

Thread the requesting RenderFrameHost through CheckPermission,
CheckSerialAccessPermission, and CheckMediaAccessPermission so the
permission manager receives the real requesting frame. Update the
serial delegate and WebContents::CheckMediaAccessPermission callers to
pass the frame they already have.

Adds a regression test that loads a cross-origin iframe with
allow="camera; microphone", calls enumerateDevices() from within the
iframe, and asserts the permission check handler receives the iframe
origin for requestingOrigin, isMainFrame, and requestingUrl.

Co-authored-by: trop[bot] <37223003+trop[bot]@users.noreply.github.com>
Co-authored-by: Sam Attard <sattard@anthropic.com>

2026-04-05 00:43:42 +00:00

..

api

fix: propagate requesting frame through sync permission checks (#50686)

2026-04-05 00:43:42 +00:00

badging

chore: bump chromium to 146.0.7645.0 (main) (#49453)

2026-01-22 17:01:09 -05:00

bluetooth

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

extensions

fix: extension service workers not starting beyond first app launch (#50640)

2026-04-02 19:49:23 +02:00

file_system_access

fix: resolve getFileHandle concurrent stalling by queuing callbacks (#50671)

2026-04-03 21:57:54 -05:00

hid

fix: use requesting frame origin in permission helper and device choosers (#50052)

2026-03-09 09:20:22 -07:00

lib

chore: bump chromium to 141.0.7346.0 (main) (#47983)

2025-08-11 12:57:31 +09:00

linux

fix: screen.getCursorScreenPoint() crash on Wayland (#50092)

2026-03-06 15:24:33 -05:00

mac

fix: deliver Universal Links when NSUserActivity.userInfo is nil (#49986)

2026-03-02 14:28:52 +01:00

media

chore: iwyu mojom-forward header files (#43741)

2024-09-17 12:58:56 -07:00

net

fix: run webRequest handlers for URLs handled by ElectronURLLoaderFactory (#45915)

2026-03-10 12:27:00 -04:00

notifications

fix: forward activation token from libnotify on notification click (#50669)

2026-04-03 15:45:34 -05:00

osr

fix: bind offscreen paint callback to child WebContents (#49998)

2026-03-02 11:24:48 -05:00

plugins

fix: compilation error when disabling extensions and pdf_viewer (#47964)

2025-08-07 11:18:32 -04:00

printing

fix: fall back to default DPI when GTK returns 0 on Linux (#50490)

2026-03-26 11:47:08 -04:00

resources

fix: address upstream Chromium shift to enable CoreAudio Tap API for audio capture used in electron's desktopCapturer (🍏 macOS). (#49717)

2026-02-10 15:06:21 +01:00

serial

fix: propagate requesting frame through sync permission checks (#50686)

2026-04-05 00:43:42 +00:00

ui

fix: glitchy rendering and maximize behavior with different GTK themes (#50644)

2026-04-04 15:05:09 -05:00

usb

fix: use requesting frame origin in permission helper and device choosers (#50052)

2026-03-09 09:20:22 -07:00

webauthn

chore: bump chromium to 134.0.6988.0 (main) (#45334)

2025-02-06 15:30:54 -05:00

win

chore: bump chromium to 142.0.7417.0 (main) (#48275)

2025-09-22 20:16:27 -07:00

animation_util_mac.mm

…

animation_util.h

…

auto_updater_mac.mm

refactor: prefer upstream gin::Arguments::ThrowTypeError() over gin_helper (#48368)

2025-09-24 19:10:05 -05:00

auto_updater.cc

chore: bump chromium to 141.0.7390.7 (main) (#48212)

2025-09-08 12:57:15 +02:00

auto_updater.h

chore: bump chromium to 141.0.7390.7 (main) (#48212)

2025-09-08 12:57:15 +02:00

background_throttling_source.h

…

browser_linux.cc

fix: validate protocol scheme names in setAsDefaultProtocolClient (#50141)

2026-03-09 18:16:34 +00:00

browser_mac.mm

fix: validate protocol scheme names in setAsDefaultProtocolClient (#50141)

2026-03-09 18:16:34 +00:00

browser_observer.h

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

browser_process_impl.cc

feat: introduce os_crypt_async in safeStorage (#49054)

2026-02-15 19:54:50 +01:00

browser_process_impl.h

chore: bump chromium to 145.0.7628.0 (main) (#49331)

2026-01-14 15:34:24 +01:00

browser_win.cc

fix: validate protocol scheme names in setAsDefaultProtocolClient (#50141)

2026-03-09 18:16:34 +00:00

browser.cc

fix: validate protocol scheme names in setAsDefaultProtocolClient (#50141)

2026-03-09 18:16:34 +00:00

browser.h

fix: validate protocol scheme names in setAsDefaultProtocolClient (#50141)

2026-03-09 18:16:34 +00:00

certificate_manager_model.cc

chore: bump chromium to 145.0.7577.0 (main) (#49175)

2025-12-16 12:32:38 -05:00

certificate_manager_model.h

chore: more iwyu (#43063)

2024-07-29 12:42:57 -05:00

child_web_contents_tracker.cc

chore: bump chromium to 143.0.7474.0 (main) (#48572)

2025-10-17 13:04:24 -04:00

child_web_contents_tracker.h

chore: bump chromium to 143.0.7474.0 (main) (#48572)

2025-10-17 13:04:24 -04:00

cookie_change_notifier.cc

chore: more iwyu (#43063)

2024-07-29 12:42:57 -05:00

cookie_change_notifier.h

chore: more iwyu (#43063)

2024-07-29 12:42:57 -05:00

draggable_region_provider.h

…

electron_api_ipc_handler_impl.cc

refactor: add static ReplyChannel::SendError() helper (#49338)

2026-01-12 17:02:58 -06:00

electron_api_ipc_handler_impl.h

refactor: allocate gin_helper::internal::Event on cpp heap (#48161)

2025-08-27 09:30:50 +09:00

electron_api_sw_ipc_handler_impl.cc

chore: bump chromium to 148.0.7738.0 (42-x-y) (#50335)

2026-03-18 14:21:26 -04:00

electron_api_sw_ipc_handler_impl.h

chore: bump chromium to 148.0.7738.0 (42-x-y) (#50335)

2026-03-18 14:21:26 -04:00

electron_autofill_driver_factory.cc

refactor: use std::map::try_emplace() over std::map::insert() (#46761)

2025-04-25 13:11:53 -05:00

electron_autofill_driver_factory.h

perf: use absl::flat_hash_map instead of std::unordered_map (#46202)

2025-03-24 10:09:14 +01:00

electron_autofill_driver.cc

…

electron_autofill_driver.h

chore: more iwyu (#43063)

2024-07-29 12:42:57 -05:00

electron_browser_client.cc

feat: make Chrome extensions work on custom protocols (#50530)

2026-04-02 20:09:59 -07:00

electron_browser_client.h

refactor: replace CHILD_PLUGIN with CHILD_EMBEDDER_FIRST on macOS (#50321)

2026-03-18 10:14:05 +01:00

electron_browser_context.cc

fix: run webRequest handlers for URLs handled by ElectronURLLoaderFactory (#45915)

2026-03-10 12:27:00 -04:00

electron_browser_context.h

fix: run webRequest handlers for URLs handled by ElectronURLLoaderFactory (#45915)

2026-03-10 12:27:00 -04:00

electron_browser_main_parts_mac.mm

feat: add --disable-geolocation command-line flag for macOS (#45934)

2025-11-13 10:39:03 -05:00

electron_browser_main_parts_posix.cc

chore: bump chromium to 137.0.7128.1 (main) (#46482)

2025-04-22 15:53:29 -04:00

electron_browser_main_parts.cc

fix: register PrintDialogLinuxFactory on Linux (#50487)

2026-03-26 11:48:00 -04:00

electron_browser_main_parts.h

fix: register PrintDialogLinuxFactory on Linux (#50487)

2026-03-26 11:48:00 -04:00

electron_child_process_host_flags.h

refactor: replace CHILD_PLUGIN with CHILD_EMBEDDER_FIRST on macOS (#50321)

2026-03-18 10:14:05 +01:00

electron_crypto_module_delegate_nss.cc

refactor: allocate gin_helper::internal::Event on cpp heap (#48161)

2025-08-27 09:30:50 +09:00

electron_crypto_module_delegate_nss.h

feat: Implement password delegate for NSS (#41205)

2024-07-17 09:48:03 -04:00

electron_download_manager_delegate.cc

fix: potential UAF in OnDownloadPathGenerated (#50003)

2026-03-02 10:28:14 -05:00

electron_download_manager_delegate.h

refactor: track downloads by guid (#45675)

2025-02-19 16:49:34 -06:00

electron_gpu_client.cc

…

electron_gpu_client.h

…

electron_navigation_throttle.cc

chore: bump chromium to 140.0.7281.0 (main) (#47616)

2025-07-14 13:42:37 -07:00

electron_navigation_throttle.h

chore: bump chromium to 138.0.7190.0 (main) (#47107)

2025-06-03 11:19:20 -04:00

electron_pdf_document_helper_client.cc

chore: bump chromium to 145.0.7577.0 (main) (#49175)

2025-12-16 12:32:38 -05:00

electron_pdf_document_helper_client.h

chore: bump chromium to 142.0.7417.0 (main) (#48275)

2025-09-22 20:16:27 -07:00

electron_permission_manager.cc

chore: bump chromium to 148.0.7741.0 (42-x-y) (#50426)

2026-03-23 14:23:20 +01:00

electron_permission_manager.h

chore: bump chromium to 148.0.7741.0 (42-x-y) (#50426)

2026-03-23 14:23:20 +01:00

electron_plugin_info_host_impl.cc

chore: bump chromium to 144.0.7547.0 (main) (#49058)

2025-12-04 16:40:04 -08:00

electron_plugin_info_host_impl.h

chore: bump chromium to 144.0.7547.0 (main) (#49058)

2025-12-04 16:40:04 -08:00

electron_preconnect_manager_delegate.cc

chore: bump chromium to 140.0.7314.0 (main) (#47882)

2025-07-28 15:31:54 -07:00

electron_preconnect_manager_delegate.h

chore: bump chromium to 140.0.7339.2 (main) (#47929)

2025-08-06 20:14:23 -04:00

electron_speech_recognition_manager_delegate.cc

chore: bump chromium to 140.0.7339.2 (main) (#47929)

2025-08-06 20:14:23 -04:00

electron_speech_recognition_manager_delegate.h

chore: bump chromium to 140.0.7339.2 (main) (#47929)

2025-08-06 20:14:23 -04:00

electron_web_contents_utility_handler_impl.cc

chore: bump chromium to 137.0.7128.1 (main) (#46482)

2025-04-22 15:53:29 -04:00

electron_web_contents_utility_handler_impl.h

refactor: remove unused system header includes (#46015)

2025-03-14 10:59:15 -05:00

electron_web_ui_controller_factory.cc

chore: bump chromium to 143.0.7469.0 (main) (#48548)

2025-10-15 14:10:10 -07:00

electron_web_ui_controller_factory.h

…

event_emitter_mixin.h

refactor: allocate api::Debugger on cpp heap (#48266)

2025-09-11 16:03:17 -04:00

extended_web_contents_observer.h

fix: modernize-use-equals-default warnings (#44935)

2024-12-03 16:25:48 -06:00

fake_location_provider.cc

chore: remove unused base/ includes (#43688)

2024-09-12 16:05:37 +02:00

fake_location_provider.h

…

feature_list_mac.mm

feat: add support for system picker in setDisplayMediaRequestHandler (#43581)

2024-09-10 16:05:57 -07:00

feature_list.cc

chore: bump chromium to 145.0.7628.0 (main) (#49331)

2026-01-14 15:34:24 +01:00

feature_list.h

feat: add support for system picker in setDisplayMediaRequestHandler (#43581)

2024-09-10 16:05:57 -07:00

file_select_helper_mac.mm

…

file_select_helper.cc

fix: clang-tidy warnings, pt. 1 (#49083)

2026-01-09 22:57:38 -08:00

file_select_helper.h

chore: remove more unused #include calls (#43000)

2024-07-25 11:25:45 +02:00

font_defaults.cc

chore: bump chromium to 141.0.7390.7 (main) (#48212)

2025-09-08 12:57:15 +02:00

font_defaults.h

fix: resolve font list in default prefernce values (#45905)

2025-03-07 18:22:03 +09:00

javascript_environment.cc

chore: remove redundant chromium patches (#50472)

2026-03-25 13:00:13 -04:00

javascript_environment.h

chore: bump chromium to 136.0.7095.0 (main) (#46118)

2025-04-03 19:02:49 -05:00

login_handler.cc

feat: support WebSocket authentication handling (#48512)

2025-11-10 21:30:44 +01:00

login_handler.h

feat: support WebSocket authentication handling (#48512)

2025-11-10 21:30:44 +01:00

microtasks_runner.cc

perf: remove isolate scope from DidProcessTask() (#44439)

2024-10-29 23:25:40 -05:00

microtasks_runner.h

…

native_window_features.cc

chore: bump chromium to 127.0.6521.0 (main) (#42118)

2024-06-07 17:18:35 -04:00

native_window_features.h

…

native_window_mac.h

chore: bump chromium to 148.0.7733.0 (42-x-y) (#50288)

2026-03-16 21:14:02 +01:00

native_window_mac.mm

chore: remove macos hittest workaround patch (#50374)

2026-03-19 15:37:42 -04:00

native_window_observer.h

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

native_window_views_win.cc

fix: accentColor set distinguishes the frame (#48405)

2025-10-03 20:10:18 +02:00

native_window_views.cc

fix: user resizable transparent windows on win32 (#50299)

2026-03-17 10:05:57 -04:00

native_window_views.h

feat: Shadows and CSD for frameless windows on Wayland (#49295)

2026-02-19 18:53:13 -06:00

native_window.cc

feat: Shadows and CSD for frameless windows on Wayland (#49295)

2026-02-19 18:53:13 -06:00

native_window.h

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

network_hints_handler_impl.cc

refactor: allocate api::Session on cpp heap (#48141)

2025-08-25 18:52:06 +09:00

network_hints_handler_impl.h

…

preload_script.cc

refactor: move gin::Converter<PreloadScript> impl to a .cc file (#47445)

2025-06-13 10:15:32 +02:00

preload_script.h

refactor: move gin::Converter<PreloadScript> impl to a .cc file (#47445)

2025-06-13 10:15:32 +02:00

protocol_registry.cc

perf: prefer GURL string_view getters (#43443)

2024-08-23 17:15:45 -05:00

protocol_registry.h

perf: prefer GURL string_view getters (#43443)

2024-08-23 17:15:45 -05:00

relauncher_linux.cc

chore: bump chromium to 141.0.7390.7 (main) (#48212)

2025-09-08 12:57:15 +02:00

relauncher_mac.cc

chore: remove unused #includes (#42971)

2024-07-22 11:31:32 +02:00

relauncher_win.cc

fix: use proper quoting for exe paths and args on Windows (#50016)

2026-03-04 11:59:49 -05:00

relauncher.cc

refactor: remove unused system header includes (#46015)

2025-03-14 10:59:15 -05:00

relauncher.h

refactor: reduce scope of relauncher's internal constants (#44860)

2024-11-30 06:54:40 -06:00

session_preferences.cc

feat: service worker preload scripts for improved extensions support (#44411)

2025-01-31 09:32:45 -05:00

session_preferences.h

feat: service worker preload scripts for improved extensions support (#44411)

2025-01-31 09:32:45 -05:00

special_storage_policy.cc

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

special_storage_policy.h

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

web_contents_permission_helper.cc

fix: propagate requesting frame through sync permission checks (#50686)

2026-04-05 00:43:42 +00:00

web_contents_permission_helper.h

fix: propagate requesting frame through sync permission checks (#50686)

2026-04-05 00:43:42 +00:00

web_contents_preferences.cc

fix: read nodeIntegrationInWorker from per-frame WebPreferences (#50122)

2026-03-09 00:50:01 -07:00

web_contents_preferences.h

chore: remove unused commandLineSwitches flag (#49993)

2026-03-02 10:30:13 -05:00

web_contents_zoom_controller.cc

chore: bump chromium to 143.0.7451.0 (main) (#48362)

2025-10-13 12:21:54 -04:00

web_contents_zoom_controller.h

chore: bump chromium to 143.0.7489.0 (main) (#48642)

2025-10-23 16:28:51 -04:00

web_contents_zoom_observer.h

chore: more iwyu (#43063)

2024-07-29 12:42:57 -05:00

web_view_guest_delegate.cc

chore: bump chromium to 140.0.7281.0 (main) (#47616)

2025-07-14 13:42:37 -07:00

web_view_guest_delegate.h

chore: bump chromium to 140.0.7281.0 (main) (#47616)

2025-07-14 13:42:37 -07:00

web_view_manager.cc

…

web_view_manager.h

…

window_list_observer.h

fix: modernize-use-equals-default warnings (#44935)

2024-12-03 16:25:48 -06:00

window_list.cc

perf: avoid copying a vector when calling ConvertToWeakPtrVector() (#47593)

2025-06-29 21:32:03 +02:00

window_list.h

…

zoom_level_delegate.cc

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00

zoom_level_delegate.h

chore: bump chromium to 146.0.7666.0 (main) (#49528)

2026-02-12 12:37:56 -05:00