Cross-site Request Forgery (CSRF)

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the OpenURLFromTab handler, which fails to route modifier-click and middle-click link...