Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(333)

Unified Diff: third_party/WebKit/Source/core/html/imports/HTMLImportsController.cpp

Issue 1487343002: Set credentials mode "same-origin" when crossOrigin=anonymous is set. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: rebase Created 5 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/Source/core/html/imports/HTMLImportsController.cpp
diff --git a/third_party/WebKit/Source/core/html/imports/HTMLImportsController.cpp b/third_party/WebKit/Source/core/html/imports/HTMLImportsController.cpp
index e3b7d2e37d9105cac90474b538863b3a3080291d..9bdbec1da5cb36056af1d667233c6c55471c1515 100644
--- a/third_party/WebKit/Source/core/html/imports/HTMLImportsController.cpp
+++ b/third_party/WebKit/Source/core/html/imports/HTMLImportsController.cpp
@@ -125,10 +125,7 @@ HTMLImportChild* HTMLImportsController::load(HTMLImport* parent, HTMLImportChild
return child;
}
- bool sameOriginRequest = master()->securityOrigin()->canRequestNoSuborigin(request.url());
- request.setCrossOriginAccessControl(
- master()->securityOrigin(), sameOriginRequest ? AllowStoredCredentials : DoNotAllowStoredCredentials,
- ClientDidNotRequestCredentials);
+ request.setCrossOriginAccessControl(master()->securityOrigin(), CrossOriginAttributeAnonymous);
ResourcePtr<RawResource> resource = RawResource::fetchImport(request, parent->document()->fetcher());
if (!resource)
return nullptr;

Powered by Google App Engine
This is Rietveld 408576698