Electron: Pointer Lock Permission Requests Can Be Attributed To The Wrong Frame

Impact For "pointerLock" permission requests made from some cross-origin iframes, "session.setPermissionRequestHandler" was given the top-level frame's "requestingUrl" and "isMainFrame" instead of the requesting frame's. Apps that grant pointer lock based on the requesting origin could grant it t...