Electron: HID And USB Permission Checks Can Be Attributed To The Wrong Origin

Impact For "hid" and "usb" permission checks made from an iframe, "session.setPermissionCheckHandler" was given the top-level frame's origin and details instead of the requesting frame's. Apps that allow these permissions based on origin could grant an embedded frame access intended for the...

Electron: HID And USB Permission Checks Can Be Attributed To The Wrong Origin

Impact For "hid" and "usb" permission checks made from an iframe, "session.setPermissionCheckHandler" was given the top-level frame's origin and details instead of the requesting frame's. Apps that allow these permissions based on origin could grant an embedded frame access intended for the...