| commit | adb80885aed2c6a96daab860b7e1902d372a7fdd | [log] [tgz] |
|---|---|---|
| author | arthursonzogni <[email protected]> | Thu Mar 11 10:43:30 2021 |
| committer | Chromium LUCI CQ <[email protected]> | Thu Mar 11 10:43:30 2021 |
| tree | d5b1c4e5b981026efbab67733a45f64e9ce82744 | |
| parent | 755dbd3bfcb46bae638bc42c1772da1fa8a8dff9 [diff] |
[OutOfBlinkSandbox] Use CSP from PolicyContainer. Use the CSP inherited, thanks to PolicyContainer, for computing sandbox. This resolves the problematic case of a navigation toward about:blank inheriting sandbox. This will allow relanding: https://chromium-review.googlesource.com/c/chromium/src/+/2450093 and passing the regression tests: https://chromium-review.googlesource.com/c/chromium/src/+/2648117 The main difficulty is that there is a chain of dependencies: - NavigationThrottle and a few components uses sandbox flags at OnResponseStarted time. - Sandbox depends on CSP. - CSP depends on finalizing the PolicyContainer. As a result, finalizing the PolicyContainer must be done earlier, at OnResponseStarted time, instead of ReadyToCommit time. Bug: 1041376 Change-Id: I3c2e3f1706f54cfb070e708a98fdf3bfbf72308f Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2741581 Commit-Queue: Arthur Sonzogni <[email protected]> Reviewed-by: Titouan Rigoudy <[email protected]> Reviewed-by: Antonio Sartori <[email protected]> Cr-Commit-Position: refs/heads/master@{#861928}
ChromiumChromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
To check out the source code locally, don't use git clone! Instead, follow the instructions on how to get the code.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .
For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.