Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(3683)

Unified Diff: chrome/common/chrome_switches.cc

Issue 8080004: Fix bug where --allow-running-insecure-content flag doesn't work against google.com sites in stab... (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: '' Created 9 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/common/chrome_switches.cc
===================================================================
--- chrome/common/chrome_switches.cc (revision 103212)
+++ chrome/common/chrome_switches.cc (working copy)
@@ -28,6 +28,10 @@
// Don't block outdated plugins.
const char kAllowOutdatedPlugins[] = "allow-outdated-plugins";
+// By default, an https page cannot run JavaScript, CSS or plug-ins from http
+// URLs. This provides an override to get the old insecure behavior.
+const char kAllowRunningInsecureContent[] = "allow-running-insecure-content";
+
// Allows injecting extensions and user scripts on the extensions
// gallery site. Normally prevented for security reasons, but can be
// useful for automation testing of the gallery.
@@ -741,6 +745,10 @@
// want to avoid having the default browser info-bar displayed.
const char kNoDefaultBrowserCheck[] = "no-default-browser-check";
+// By default, an https page can load images, fonts or frames from an http page.
+// This switch overrides this to block this lesser mixed-content problem.
+const char kNoDisplayingInsecureContent[] = "no-displaying-insecure-content";
+
// Don't record/playback events when using record & playback.
const char kNoEvents[] = "no-events";
@@ -761,6 +769,11 @@
// other proxy server flags that are passed.
const char kNoProxyServer[] = "no-proxy-server";
+// Stronger version of insecure content blocking, for the case where the
+// blocking would only be applied to a whitelist of domains. Switch is
+// expected to become obsolete once the whitelist goes away.
+const char kNoRunningInsecureContent[] = "no-running-insecure-content";
+
// Disables the service process from adding itself as an autorun process. This
// does not delete existing autorun registrations, it just prevents the service
// from registering a new one.

Powered by Google App Engine
This is Rietveld 408576698