1 matches found
Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
Impact For serial-port and media camera / microphone permission checks made from an iframe, the requestingOrigin passed to session.setPermissionCheckHandler was the top-level frame's origin rather than the requesting frame's. Origin-based handler logic could therefore grant a cross-origin iframe...
5.9CVSS5.6AI score
SaveExploits0References3Affected Software1
20