512 matches found
Electron: ProtocolResponse.url reuses the default session cache instead of the registering session
Impact When a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession instead of the session that handled the protocol. A cached response could then be reused across otherwise isolated session partitions. Apps that u...
5.9CVSS5.6AI score
SaveExploits0References2Affected Software1
20