electron/electron
### [`v9.2.1`](https://togithub.com/electron/electron/releases/v9.2.1)
[Compare Source](https://togithub.com/electron/electron/compare/v9.2.0...v9.2.1)
### Release Notes for v9.2.1
#### Fixes
- fix loading shared worker scripts over custom protocol
- fix crash when loading worker scripts with nodeIntegration enabled. [#24750](https://togithub.com/electron/electron/issues/24750)
- Fixed a crash that could occur when using in-memory sessions. [#25002](https://togithub.com/electron/electron/issues/25002)
- Fixed an issue where some Node.js methods would not work with URL instances constructed in the renderer process. [#24862](https://togithub.com/electron/electron/issues/24862)
- Fixed an issue where the Save button did not function in PDF previews. [#24996](https://togithub.com/electron/electron/issues/24996)
- Fixed inactive windows having active titlebar on Windows. [#24873](https://togithub.com/electron/electron/issues/24873)
- Fixed missing `guid` parameter in Linux crash reports. [#24898](https://togithub.com/electron/electron/issues/24898)
- Increased maximum length for crash keys from 127B to 20KB. [#24854](https://togithub.com/electron/electron/issues/24854)
- [a11y] fix an issue where voiceover doesn't read the first item selected from a ARIA combobox. [#25004](https://togithub.com/electron/electron/issues/25004)
#### Other Changes
- Backported the fix to CVE-2020-6532: Use after free in SCTP. [#24887](https://togithub.com/electron/electron/issues/24887)
- Backported the fix to CVE-2020-6537: Type Confusion in V8. [#24885](https://togithub.com/electron/electron/issues/24885)
- Resolve network issues that prevented RTC calls from being connected due to network IP address changes and ICE. (Chromium issue [`1113227`](https://togithub.com/electron/electron/commit/1113227)). [#24997](https://togithub.com/electron/electron/issues/24997)
#### Unknown
- Fixed issues with CORS when making requests from extensions. [#24915](https://togithub.com/electron/electron/issues/24915)
### [`v9.2.0`](https://togithub.com/electron/electron/releases/v9.2.0)
[Compare Source](https://togithub.com/electron/electron/compare/v9.1.2...v9.2.0)
### Release Notes for v9.2.0
#### Features
- Added new `worldSafeExecuteJavaScript` webPreference to ensure that the return values from `webFrame.executeJavaScript` are world safe when context isolation is enabled. [#24712](https://togithub.com/electron/electron/issues/24712)
#### Fixes
- Fixed a crash that could happen when using `hookWindowMessage` on Windows. [#24769](https://togithub.com/electron/electron/issues/24769)
- Fixed crash when navigating from a page with webview that has inherited zoom level. [#24764](https://togithub.com/electron/electron/issues/24764)
- Save crash reports locally when uploadToServer: false on linux. [#24788](https://togithub.com/electron/electron/issues/24788)
### [`v9.1.2`](https://togithub.com/electron/electron/releases/v9.1.2)
[Compare Source](https://togithub.com/electron/electron/compare/v9.1.1...v9.1.2)
### Release Notes for v9.1.2
#### Fixes
- Fix: remove unnecessary corner mask overriding to increase window resize performance. [#24702](https://togithub.com/electron/electron/issues/24702)
- Fixed an issue where VoiceOver was unable to navigate from the top-level window back into the web contents. [#24699](https://togithub.com/electron/electron/issues/24699)
- Protocol response streams are now destroyed if the request is aborted. [#24657](https://togithub.com/electron/electron/issues/24657)
#### Other Changes
- Improved the performance of sending JS primitives over the context bridge. [#24746](https://togithub.com/electron/electron/issues/24746)
### [`v9.1.1`](https://togithub.com/electron/electron/releases/v9.1.1)
[Compare Source](https://togithub.com/electron/electron/compare/v9.1.0...v9.1.1)
### Release Notes for v9.1.1
#### Fixes
- Fixed a termination crash on Web Workers with Node.js integration enabled. [#24464](https://togithub.com/electron/electron/issues/24464)
- Fixed an issue where `webContents.print()` would sometimes hang with invalid settings. [#24508](https://togithub.com/electron/electron/issues/24508)
- Fixed an issue where cpu and heap profiling in Node.js did not work properly with `--cpu-prof`, `--heap-prof`, and related CLI flags. [#24541](https://togithub.com/electron/electron/issues/24541)
- Fixed an issue where macOS window vibrancy active state did not always match the active state of the window. [#24533](https://togithub.com/electron/electron/issues/24533)
- Fixed broken `--trace-sync-io` flag in Node.js. [#24648](https://togithub.com/electron/electron/issues/24648)
- Fixed clipboard.readBuffer returning incorrect value. [#24469](https://togithub.com/electron/electron/issues/24469)
- Fixed potentially invalid duplex mode settings on Linux. [#24547](https://togithub.com/electron/electron/issues/24547)
#### Other Changes
- Fix: DCHECK failure in value.IsHeapObject() in objectsdebug.cc. (Chromium security issue [`1084820`](https://togithub.com/electron/electron/commit/1084820)). [#24566](https://togithub.com/electron/electron/issues/24566)
- Fix: XSS on chrome://histograms/ with a compromised renderer. (Chromium security issue [`1073409`](https://togithub.com/electron/electron/commit/1073409)). [#24625](https://togithub.com/electron/electron/issues/24625)
- Fix: crash when executing `debugger.sendCommand`. (Chromium security issue [`1016278`](https://togithub.com/electron/electron/commit/1016278)). [#24620](https://togithub.com/electron/electron/issues/24620)
- Fix: heap-use-after-free in content::NavigationRequest::OnWillProcessResponseProcessed. (Chromium security issue [`1090543`](https://togithub.com/electron/electron/commit/1090543)). [#24569](https://togithub.com/electron/electron/issues/24569)
- Fix: heap-use-after-free in ui::AXTreeSerializerblink (Chromium security issue [`1065122`](https://togithub.com/electron/electron/commit/1065122)). [#24557](https://togithub.com/electron/electron/issues/24557)
- Fix: iframe in victim page can detect Scroll To Text Fragment activation. (Chromium security issue [`1042986`](https://togithub.com/electron/electron/commit/1042986)). [#24624](https://togithub.com/electron/electron/issues/24624)
- Fix: integer overflow in GrTextBlob::Make. (Chromium security issue [`1080481`](https://togithub.com/electron/electron/commit/1080481)). [#24586](https://togithub.com/electron/electron/issues/24586)
- Fix: javascript URI sandbox flags aren't propagated in a blank string case. (Chromium security issue [`1074340`](https://togithub.com/electron/electron/commit/1074340)). [#24621](https://togithub.com/electron/electron/issues/24621)
- Fix: memcpy-param-overlap in AudioBuffer::copyFromChannel. (Chromium security issue [`1081722`](https://togithub.com/electron/electron/commit/1081722)). [#24582](https://togithub.com/electron/electron/issues/24582)
- Fix: remove leaks of post-redirect URL for ` Githubissues.
Githubissues is a development platform for aggregating issues.
This PR contains the following updates:
3.1.13
->9.2.1
Release Notes
electron/electron
### [`v9.2.1`](https://togithub.com/electron/electron/releases/v9.2.1) [Compare Source](https://togithub.com/electron/electron/compare/v9.2.0...v9.2.1) ### Release Notes for v9.2.1 #### Fixes - fix loading shared worker scripts over custom protocol - fix crash when loading worker scripts with nodeIntegration enabled. [#24750](https://togithub.com/electron/electron/issues/24750) - Fixed a crash that could occur when using in-memory sessions. [#25002](https://togithub.com/electron/electron/issues/25002) - Fixed an issue where some Node.js methods would not work with URL instances constructed in the renderer process. [#24862](https://togithub.com/electron/electron/issues/24862) - Fixed an issue where the Save button did not function in PDF previews. [#24996](https://togithub.com/electron/electron/issues/24996) - Fixed inactive windows having active titlebar on Windows. [#24873](https://togithub.com/electron/electron/issues/24873) - Fixed missing `guid` parameter in Linux crash reports. [#24898](https://togithub.com/electron/electron/issues/24898) - Increased maximum length for crash keys from 127B to 20KB. [#24854](https://togithub.com/electron/electron/issues/24854) - [a11y] fix an issue where voiceover doesn't read the first item selected from a ARIA combobox. [#25004](https://togithub.com/electron/electron/issues/25004) #### Other Changes - Backported the fix to CVE-2020-6532: Use after free in SCTP. [#24887](https://togithub.com/electron/electron/issues/24887) - Backported the fix to CVE-2020-6537: Type Confusion in V8. [#24885](https://togithub.com/electron/electron/issues/24885) - Resolve network issues that prevented RTC calls from being connected due to network IP address changes and ICE. (Chromium issue [`1113227`](https://togithub.com/electron/electron/commit/1113227)). [#24997](https://togithub.com/electron/electron/issues/24997) #### Unknown - Fixed issues with CORS when making requests from extensions. [#24915](https://togithub.com/electron/electron/issues/24915) ### [`v9.2.0`](https://togithub.com/electron/electron/releases/v9.2.0) [Compare Source](https://togithub.com/electron/electron/compare/v9.1.2...v9.2.0) ### Release Notes for v9.2.0 #### Features - Added new `worldSafeExecuteJavaScript` webPreference to ensure that the return values from `webFrame.executeJavaScript` are world safe when context isolation is enabled. [#24712](https://togithub.com/electron/electron/issues/24712) #### Fixes - Fixed a crash that could happen when using `hookWindowMessage` on Windows. [#24769](https://togithub.com/electron/electron/issues/24769) - Fixed crash when navigating from a page with webview that has inherited zoom level. [#24764](https://togithub.com/electron/electron/issues/24764) - Save crash reports locally when uploadToServer: false on linux. [#24788](https://togithub.com/electron/electron/issues/24788) ### [`v9.1.2`](https://togithub.com/electron/electron/releases/v9.1.2) [Compare Source](https://togithub.com/electron/electron/compare/v9.1.1...v9.1.2) ### Release Notes for v9.1.2 #### Fixes - Fix: remove unnecessary corner mask overriding to increase window resize performance. [#24702](https://togithub.com/electron/electron/issues/24702) - Fixed an issue where VoiceOver was unable to navigate from the top-level window back into the web contents. [#24699](https://togithub.com/electron/electron/issues/24699) - Protocol response streams are now destroyed if the request is aborted. [#24657](https://togithub.com/electron/electron/issues/24657) #### Other Changes - Improved the performance of sending JS primitives over the context bridge. [#24746](https://togithub.com/electron/electron/issues/24746) ### [`v9.1.1`](https://togithub.com/electron/electron/releases/v9.1.1) [Compare Source](https://togithub.com/electron/electron/compare/v9.1.0...v9.1.1) ### Release Notes for v9.1.1 #### Fixes - Fixed a termination crash on Web Workers with Node.js integration enabled. [#24464](https://togithub.com/electron/electron/issues/24464) - Fixed an issue where `webContents.print()` would sometimes hang with invalid settings. [#24508](https://togithub.com/electron/electron/issues/24508) - Fixed an issue where cpu and heap profiling in Node.js did not work properly with `--cpu-prof`, `--heap-prof`, and related CLI flags. [#24541](https://togithub.com/electron/electron/issues/24541) - Fixed an issue where macOS window vibrancy active state did not always match the active state of the window. [#24533](https://togithub.com/electron/electron/issues/24533) - Fixed broken `--trace-sync-io` flag in Node.js. [#24648](https://togithub.com/electron/electron/issues/24648) - Fixed clipboard.readBuffer returning incorrect value. [#24469](https://togithub.com/electron/electron/issues/24469) - Fixed potentially invalid duplex mode settings on Linux. [#24547](https://togithub.com/electron/electron/issues/24547) #### Other Changes - Fix: DCHECK failure in value.IsHeapObject() in objectsdebug.cc. (Chromium security issue [`1084820`](https://togithub.com/electron/electron/commit/1084820)). [#24566](https://togithub.com/electron/electron/issues/24566) - Fix: XSS on chrome://histograms/ with a compromised renderer. (Chromium security issue [`1073409`](https://togithub.com/electron/electron/commit/1073409)). [#24625](https://togithub.com/electron/electron/issues/24625) - Fix: crash when executing `debugger.sendCommand`. (Chromium security issue [`1016278`](https://togithub.com/electron/electron/commit/1016278)). [#24620](https://togithub.com/electron/electron/issues/24620) - Fix: heap-use-after-free in content::NavigationRequest::OnWillProcessResponseProcessed. (Chromium security issue [`1090543`](https://togithub.com/electron/electron/commit/1090543)). [#24569](https://togithub.com/electron/electron/issues/24569) - Fix: heap-use-after-free in ui::AXTreeSerializerblink (Chromium security issue [`1065122`](https://togithub.com/electron/electron/commit/1065122)). [#24557](https://togithub.com/electron/electron/issues/24557) - Fix: iframe in victim page can detect Scroll To Text Fragment activation. (Chromium security issue [`1042986`](https://togithub.com/electron/electron/commit/1042986)). [#24624](https://togithub.com/electron/electron/issues/24624) - Fix: integer overflow in GrTextBlob::Make. (Chromium security issue [`1080481`](https://togithub.com/electron/electron/commit/1080481)). [#24586](https://togithub.com/electron/electron/issues/24586) - Fix: javascript URI sandbox flags aren't propagated in a blank string case. (Chromium security issue [`1074340`](https://togithub.com/electron/electron/commit/1074340)). [#24621](https://togithub.com/electron/electron/issues/24621) - Fix: memcpy-param-overlap in AudioBuffer::copyFromChannel. (Chromium security issue [`1081722`](https://togithub.com/electron/electron/commit/1081722)). [#24582](https://togithub.com/electron/electron/issues/24582) - Fix: remove leaks of post-redirect URL for ` Githubissues.