Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(213)

Issue 7069006: Prevent registerProtocolHandler for pseudo-schemes and disabled schemes. (Closed)

Created:
9 years, 7 months ago by koz (OOO until 15th September)
Modified:
9 years, 5 months ago
Reviewers:
tony
CC:
chromium-reviews, Avi (use Gerrit), brettw-cc_chromium.org
Visibility:
Public.

Description

Prevent registerProtocolHandler for pseudo-schemes and disabled schemes. Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=86799

Patch Set 1 #

Total comments: 2

Patch Set 2 : fix indenting #

Patch Set 3 : add missing include #

Unified diffs Side-by-side diffs Delta from patch set Stats (+8 lines, -2 lines) Patch
M chrome/browser/ui/tab_contents/tab_contents_wrapper.cc View 1 2 2 chunks +8 lines, -2 lines 0 comments Download

Messages

Total messages: 3 (0 generated)
koz (OOO until 15th September)
9 years, 7 months ago (2011-05-25 08:06:36 UTC) #1
tony
LGTM. What happens if someone tries to register http/https/ftp? http://codereview.chromium.org/7069006/diff/1/chrome/browser/ui/tab_contents/tab_contents_wrapper.cc File chrome/browser/ui/tab_contents/tab_contents_wrapper.cc (right): http://codereview.chromium.org/7069006/diff/1/chrome/browser/ui/tab_contents/tab_contents_wrapper.cc#newcode434 chrome/browser/ui/tab_contents/tab_contents_wrapper.cc:434: ...
9 years, 7 months ago (2011-05-25 17:42:59 UTC) #2
koz (OOO until 15th September)
9 years, 7 months ago (2011-05-25 21:40:11 UTC) #3
Thanks, Tony!

ProtocolHandlerRegistry will only register handlers for things that don't have
handlers already, so http and friends are safe (there are also some explicit
checks for this in WebKit).

http://codereview.chromium.org/7069006/diff/1/chrome/browser/ui/tab_contents/...
File chrome/browser/ui/tab_contents/tab_contents_wrapper.cc (right):

http://codereview.chromium.org/7069006/diff/1/chrome/browser/ui/tab_contents/...
chrome/browser/ui/tab_contents/tab_contents_wrapper.cc:434:
ChildProcessSecurityPolicy::GetInstance();
On 2011/05/25 17:42:59, tony wrote:
> Nit: 4 space indent when wrapping

Done.

Powered by Google App Engine
This is Rietveld 408576698