Release Notes for v42.11.3

Fixes

• File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions. #53695 ^{(Also in 43, 44, 45)}
• Fixed session.setPermissionCheckHandler receiving the top-level origin and a null webContents for hid and usb checks made from a subframe. #53736 ^{(Also in 43, 44, 45)}
• Fixed webContents.on(), removeListener() and removeAllListeners() throwing "Object has been destroyed" for console-message listeners after the WebContents was destroyed. #53497 ^{(Also in 43, 44, 45)}
• Fixed a crash on Linux when process.env was written while another thread was reading the environment, and a memory leak when a worker thread exits. #53511 ^{(Also in 43, 44, 45)}
• Fixed a possible crash on Windows when a file dialog was shown for a window that was being closed at the same time. #53585 ^{(Also in 43, 44, 45)}
• Fixed a renderer crash when the main process sent IPC to, or a page navigated, a same-process window.open() child whose contextIsolation differed from its opener's. #53541 ^{(Also in 43, 44, 45)}
• Fixed crashes in setDisplayMediaRequestHandler when the granted frame had been destroyed or another tab was granted by id. #53674 ^{(Also in 43, 44, 45)}
• Internal <webview>, window.close() and executeJavaScript reply IPCs are validated against the sending frame. #53727 ^{(Also in 43, 44, 45)}
• <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load. #53719 ^{(Also in 43, 44, 45)}
• getUserMedia with chromeMediaSource: 'desktop' no longer accepts WebContents source ids; use chromeMediaSource: 'tab' with webContents.getMediaSourceId() or setDisplayMediaRequestHandler to capture a WebContents. #53710 ^{(Also in 43, 44, 45)}
• nodeIntegrationInWorker now applies only to workers created by frames that themselves have Node integration; enable nodeIntegrationInSubFrames to keep Node in workers created by subframes. #53713 ^{(Also in 43, 44, 45)}
• openExternal permission requests started by a frame that has since gone away are attributed to that frame's origin rather than to the navigating page. #53697 ^{(Also in 43, 44, 45)}
• pointerLock and keyboardLock permission requests now report the requesting frame, and execCommand('paste') requires user activation in the frame that calls it. #53702 ^{(Also in 43, 44, 45)}