| commit | 3cfec3142d8b6dbb1cecb03125aa81bbbcda6500 | |
| author | kinuko <kinuko@chromium.org> | |
| Sat, 7 Feb 2015 12:34:42 +0000 (7 04:34 -0800) | ||
| committer | Commit bot <commit-bot@chromium.org> | |
| Sat, 7 Feb 2015 12:35:55 +0000 (7 12:35 +0000) | ||
| tree | 44236b6174d318baf1e9ef668ba52a6829775807 | treesnapshot (tar.gz zip) |
| parent | e27865b72eab201b557a60b88bb648e3f8b0843f | commitdiff |
ServiceWorker: Make browser-side check stricter for non-HTTP(s) schemes
As a follow-up for filesystem: URL patch:
https://code.google.com/p/chromium/issues/detail?id=453982
As of http://src.chromium.org/viewvc/blink?view=revision&revision=189570
we started to check non-HTTP(s) schemes in renderer process, so
any requests for registering non-HTTP(s) schemes in the browser
should be considererd malicious / invalid and we should just do
BadMessageReceived().
BUG=455115
TEST=ServiceWorkerDispatcherHostTest.*
TEST=no layout tests should crash swith this change
Review URL: https://codereview.chromium.org/906453002
Cr-Commit-Position: refs/heads/master@{#315199}
As a follow-up for filesystem: URL patch:
https://code.google.com/p/chromium/issues/detail?id=453982
As of http://src.chromium.org/viewvc/blink?view=revision&revision=189570
we started to check non-HTTP(s) schemes in renderer process, so
any requests for registering non-HTTP(s) schemes in the browser
should be considererd malicious / invalid and we should just do
BadMessageReceived().
BUG=455115
TEST=ServiceWorkerDispatcherHostTest.*
TEST=no layout tests should crash swith this change
Review URL: https://codereview.chromium.org/906453002
Cr-Commit-Position: refs/heads/master@{#315199}
| content/browser/service_worker/service_worker_dispatcher_host.cc | diffblobblamehistory | |
| content/browser/service_worker/service_worker_dispatcher_host_unittest.cc | diffblobblamehistory |