Function validateSender

src/main/electron.js:361–367

(frame)

// Only allow request from the app code itself
function validateSender (frame)
{
	// senderFrame may be null if the frame has navigated or been destroyed
	// before the IPC handler runs (documented behaviour on IpcMainEvent).
	if (frame == null) return false;
	return frame.url.replace(/\/.\:\//, str => str.toUpperCase()).startsWith(codeUrl);
}

function isWithinDisplayBounds(pos) 
{