DescriptionAdd 'OriginAccessEntry::matchDomain'.
We need to ignore protocol shifts when calculating the first party for
cookies, as we're otherwise breaking sites that embed secure login
forms into insecure pages. It's better to weaken the check than to force
those sites to put everything into plaintext.
BUG=534749
R=jochen@chromium.org
Committed: https://crrev.com/2cd11de2ba88e31413b0a38649f039d41206470b
Cr-Commit-Position: refs/heads/master@{#370098}
Patch Set 1 #
Messages
Total messages: 7 (2 generated)
|