| commit | ea11a407e1f4cd09969124da6f0c238fb3b302e0 | [log] [tgz] |
|---|---|---|
| author | Torne (Richard Coles) <[email protected]> | Tue Aug 25 17:14:41 2020 |
| committer | Commit Bot <[email protected]> | Tue Aug 25 17:14:41 2020 |
| tree | 14c27b8faf0074f2045eaa81b0376eb8c340a370 | |
| parent | f6a6e0b18835ce329cbcd30b7df05ea3c4c9f1e8 [diff] |
webview: record histogram for invalid headers. Check the useragent set by apps to see if it's valid (as per the simple rules from //net), and if not, see if there's a plausible interpretation of the string as an attempt to do something clever or if it just looks like nonsense. Also check headers passed to loadUrl() for validity, but since apps can already add arbitrary headers here, just record a boolean histogram for valid/invalid as there's no reason to allow creative uses. Fixed: 1108405 Bug: 1105745 Change-Id: Iba562c2b9b17b0615e48dee5c58bd4b435b79442 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2355049 Commit-Queue: Richard Coles <[email protected]> Auto-Submit: Richard Coles <[email protected]> Reviewed-by: Steven Holte <[email protected]> Reviewed-by: David Van Cleve <[email protected]> Reviewed-by: Nate Fischer <[email protected]> Cr-Commit-Position: refs/heads/master@{#801435}
ChromiumChromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .
For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.