WebContents.prototype.sendToFrame = function (frameId, channel, ...args) {
  if (typeof channel !== 'string') {
    throw new Error('Missing required channel argument');
  } else if (typeof frameId !== 'number') {
    throw new Error('Missing required frameId argument');
  }

  return this._sendToFrame(false /* internal */, frameId, channel, args);
};
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.