Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(155)

Issue 1168913002: Use top frame's origin when checking content settings for plugins. (Closed)

Created:
5 years, 6 months ago by alexmos
Modified:
5 years, 3 months ago
Reviewers:
Lei Zhang, nasko
CC:
chromium-reviews, mlamouri+watch-content_chromium.org, creis+watch_chromium.org, nasko+codewatch_chromium.org, jam, darin-cc_chromium.org, mkwst+moarreviews-renderer_chromium.org, site-isolation-reviews_chromium.org
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Use top frame's origin when checking content settings for plugins. When creating plugins, the renderer currently sends an IPC to the browser process and passes the top frame's URL, to be used in a content settings check on the IO thread. However, with out-of-process iframes, this doesn't work if the top frame is a RemoteFrame, which has no document or URL available. This CL changes the content settings check to use the top frame's origin instead, which will use replicated origins for RemoteFrames. For discussion about this change, see https://groups.google.com/a/chromium.org/d/topic/site-isolation-dev/JPKPFfZpVHE/discussion BUG=426658, 466297 Committed: https://crrev.com/be8f323e5038b29399adcfa365603a9b7cd13574 Cr-Commit-Position: refs/heads/master@{#345104}

Patch Set 1 #

Patch Set 2 : Rebase and repurpose #

Patch Set 3 : Nits #

Total comments: 2

Patch Set 4 : Rename object.html #

Total comments: 2

Patch Set 5 : Address thestig's nit #

Unified diffs Side-by-side diffs Delta from patch set Stats (+52 lines, -7 lines) Patch
M chrome/browser/chrome_site_per_process_browsertest.cc View 1 2 3 1 chunk +23 lines, -0 lines 0 comments Download
M chrome/renderer/chrome_content_renderer_client.cc View 1 1 chunk +3 lines, -2 lines 0 comments Download
M chrome/renderer/plugins/chrome_plugin_placeholder.cc View 1 2 3 4 1 chunk +2 lines, -1 line 0 comments Download
M chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc View 1 2 3 4 1 chunk +2 lines, -1 line 0 comments Download
A chrome/test/data/flash_object.html View 1 2 3 1 chunk +18 lines, -0 lines 0 comments Download
M content/renderer/render_frame_impl.cc View 1 2 1 chunk +4 lines, -3 lines 0 comments Download

Messages

Total messages: 14 (4 generated)
alexmos
Nasko, can you please take a look? This should fix our OOPIF plugin crashes. Trybots ...
5 years, 4 months ago (2015-08-20 16:27:44 UTC) #2
nasko
LGTM with a nit. https://codereview.chromium.org/1168913002/diff/40001/chrome/browser/chrome_site_per_process_browsertest.cc File chrome/browser/chrome_site_per_process_browsertest.cc (right): https://codereview.chromium.org/1168913002/diff/40001/chrome/browser/chrome_site_per_process_browsertest.cc#newcode111 chrome/browser/chrome_site_per_process_browsertest.cc:111: GURL frame_url = embedded_test_server()->GetURL("b.com", "/object.html"); ...
5 years, 4 months ago (2015-08-20 20:44:24 UTC) #3
alexmos
https://codereview.chromium.org/1168913002/diff/40001/chrome/browser/chrome_site_per_process_browsertest.cc File chrome/browser/chrome_site_per_process_browsertest.cc (right): https://codereview.chromium.org/1168913002/diff/40001/chrome/browser/chrome_site_per_process_browsertest.cc#newcode111 chrome/browser/chrome_site_per_process_browsertest.cc:111: GURL frame_url = embedded_test_server()->GetURL("b.com", "/object.html"); On 2015/08/20 20:44:23, nasko ...
5 years, 4 months ago (2015-08-20 21:23:44 UTC) #4
alexmos
thestig@: can you please review chrome/ for OWNERS?
5 years, 4 months ago (2015-08-20 21:26:34 UTC) #6
Lei Zhang
lgtm https://codereview.chromium.org/1168913002/diff/60001/chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc File chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc (right): https://codereview.chromium.org/1168913002/diff/60001/chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc#newcode51 chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc:51: render_frame->GetRoutingID(), GURL(orig_params.url), GURL(top_origin), nit: Can you keep the ...
5 years, 4 months ago (2015-08-20 21:33:28 UTC) #7
alexmos
https://codereview.chromium.org/1168913002/diff/60001/chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc File chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc (right): https://codereview.chromium.org/1168913002/diff/60001/chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc#newcode51 chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc:51: render_frame->GetRoutingID(), GURL(orig_params.url), GURL(top_origin), On 2015/08/20 21:33:28, Lei Zhang wrote: ...
5 years, 4 months ago (2015-08-20 21:45:07 UTC) #8
Lei Zhang
On 2015/08/20 21:45:07, alexmos wrote: > https://codereview.chromium.org/1168913002/diff/60001/chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc > File chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc (right): > > https://codereview.chromium.org/1168913002/diff/60001/chrome/renderer/plugins/shadow_dom_plugin_placeholder.cc#newcode51 > ...
5 years, 4 months ago (2015-08-20 21:48:17 UTC) #9
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1168913002/80001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1168913002/80001
5 years, 3 months ago (2015-08-24 16:31:42 UTC) #12
commit-bot: I haz the power
Committed patchset #5 (id:80001)
5 years, 3 months ago (2015-08-24 17:06:40 UTC) #13
commit-bot: I haz the power
5 years, 3 months ago (2015-08-24 17:07:10 UTC) #14
Message was sent while issue was closed.
Patchset 5 (id:??) landed as
https://crrev.com/be8f323e5038b29399adcfa365603a9b7cd13574
Cr-Commit-Position: refs/heads/master@{#345104}

Powered by Google App Engine
This is Rietveld 408576698