chrome/test/data/chrome_extension_resource.html - Issue 12218064: Non-web-accessible extension URLs should not load in non-extension processes

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: chrome/test/data/chrome_extension_resource.html

Issue 12218064: Non-web-accessible extension URLs should not load in non-extension processes (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src

Patch Set: Fix? a compile error Created 7 years, 10 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

OLD	NEW
(Empty)
	1 <html>

	2 <head>

	3 <script>

	4 var xhrStatus = -1;

	5 var imgUrl = 'chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/images/bookmar k_manager_recent.png';

	6

	7 window.onload = function() {

	8 history.pushState('', '',

	9 'chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html');
	Charlie Reis 2013/02/22 02:45:17 Are we testing whether this is allowed? Maybe add Are we testing whether this is allowed? Maybe add a comment saying that this is allowed due to --disable-web-security in the test? (I'm wondering what will happen if we disallow this pushState call later.) nasko 2013/02/22 17:14:35 Done. Show quoted text On 2013/02/22 02:45:17, creis wrote: > Are we testing whether this is allowed? Maybe add a comment saying that this is > allowed due to --disable-web-security in the test? Done. Show quoted text > (I'm wondering what will happen if we disallow this pushState call later.) This is one of the outstanding items we need to cover - behavior of pushState in general.
	10 var xhr = new XMLHttpRequest();

	11 xhr.onreadystatechange = function() {

	12 if (xhr.readyState == 4) {

	13 xhrStatus = xhr.status;

	14 if (xhrStatus == 200) {

	15 document.getElementById('star').src =

	16 window.URL.createObjectURL(this.response);

	17 }

	18 domAutomationController.setAutomationId(0);

	19 domAutomationController.send(xhr.status);

	20 }

	21 }

	22 xhr.open('GET', imgUrl);

	23 xhr.responseType = 'blob';

	24 xhr.send();

	25 }

	26 </script>

	27 </head>

	28 <body>

	29 <img id='star'>

	30 </body>

	31 </html>

OLD	NEW

« chrome/browser/extensions/extension_protocols.cc ('K') | « chrome/common/extensions/extension.h ('k') | no next file » | no next file with comments »