Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(157)

Unified Diff: chrome/browser/extensions/chrome_content_browser_client_extensions_part.h

Issue 1270663002: Validate the Origin HTTP header in the browser process. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Rebase Created 5 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/browser/extensions/chrome_content_browser_client_extensions_part.h
diff --git a/chrome/browser/extensions/chrome_content_browser_client_extensions_part.h b/chrome/browser/extensions/chrome_content_browser_client_extensions_part.h
index c994cc9f2af39dd54d8462087044ac8931ae3590..252578553387458041bf3f63b81d6e39698457b1 100644
--- a/chrome/browser/extensions/chrome_content_browser_client_extensions_part.h
+++ b/chrome/browser/extensions/chrome_content_browser_client_extensions_part.h
@@ -30,6 +30,9 @@ class ChromeContentBrowserClientExtensionsPart
const GURL& effective_url);
static bool CanCommitURL(content::RenderProcessHost* process_host,
const GURL& url);
+ static bool IsIllegalOrigin(content::ResourceContext* resource_context,
+ int child_process_id,
+ const GURL& origin);
static bool IsSuitableHost(Profile* profile,
content::RenderProcessHost* process_host,
const GURL& site_url);

Powered by Google App Engine
This is Rietveld 408576698