WebContents.prototype._sendToFrameInternal = function (frame, channel, ...args) {
  if (typeof channel !== 'string') {
    throw new Error('Missing required channel argument');
  } else if (!(typeof frame === 'number' || Array.isArray(frame))) {
    throw new Error('Missing required frame argument (must be number or array)');
  }

  return this._sendToFrame(true /* internal */, frame, channel, args);
};
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.