Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/29 6:05 p.m.•7 views

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Impact Popups opened from a sandboxed iframe through a link for example target="blank" or a middle-click did not inherit the iframe's HTML sandbox restrictions. Content that was meant to run sandboxed could open a popup with the embedding app's full origin, gaining access to that origin's cookies...

8.2CVSS5.8AI score
SaveExploits0References9Affected Software1
Rows per page
Query Builder