DescriptionDon't crash in V8Window::openMethodCustom when called on RemoteDOMWindow.
Currently, openMethodCustom assumes it's called on a LocalDOMWindow,
which may not be true in --site-per-process mode. This CL moves the
cast to LocalDOMWindow to be done after the BindingSecurity check,
which should throw exceptions when called on RemoteDOMWindows (since
those are always cross-origin).
BUG=501414, 477150
TEST=http/tests/security/xss-exception.html with --site-per-process
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=197295
Patch Set 1 #
Messages
Total messages: 6 (2 generated)
|
|||||||||||||||||||