GHSA-2P8C-GR87-2676 Electron: SameSite cookie restrictions are not applied to windows opened from links

Impact Pages opened into a new window from a link were loaded as if the app itself had navigated there rather than the page that contained the link, so the request was treated as same-site: SameSite=Strict cookies were sent and Sec-Fetch-Site did not identify the initiating page. Content shown in...