Chromium Code Reviews
DescriptionUse correct WebView from TextInputController.
Before this CL TextInputController would act on the WebView
associated with the main test window, rather than acting on the WebView
associated with the frame owning the TextInputController's
javascript bindings. This could potentially lead to UaF
(there is no known repro though at the moment).
Changes in the current CL:
- TextInputController's lifetime is now owned by WebViewTestProxy
(rather than having TextInputController owned by the global
TestInterfaces object).
- TextInputController now uses WebView from the correct
WebViewTestProxy (rather than one associted with the main test window).
- TestInterfaces object no longer has a pointer to an
TextInputController object (because there is no longer a
central/global TextInputController object). This means having to
move code that calls TextInputController::Install away
from TestInterfaces.
Additional changes:
- TextInputController does not need to inherit from
base::SupportsWeakPtr<...> (because TextInputController already
has a weak_factory_ field).
BUG=595089
Committed: https://crrev.com/8b6d5f3c021f312bb13f4a4cf2c04bd8f1c5187f
Cr-Commit-Position: refs/heads/master@{#389142}
Patch Set 1 #Patch Set 2 : Self-review. #Patch Set 3 : Constructor should be explicit. #Patch Set 4 : Rebasing... #
Depends on Patchset: Dependent Patchsets: Messages
Total messages: 12 (5 generated)
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||