Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(3572)

Unified Diff: content/renderer/render_thread_impl.cc

Issue 1917073002: Block webpages from navigating to view-source URLs (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Fix ChildProcessSecurityPolicy and tests Created 4 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: content/renderer/render_thread_impl.cc
diff --git a/content/renderer/render_thread_impl.cc b/content/renderer/render_thread_impl.cc
index ee35e8d3fd3ee9969efb6cc66d93c71d77167986..ee34e714b5bbe3d43445c77a7242ee84859cb849 100644
--- a/content/renderer/render_thread_impl.cc
+++ b/content/renderer/render_thread_impl.cc
@@ -1274,6 +1274,10 @@ void RenderThreadImpl::RegisterSchemes() {
// chrome-devtools:
WebString devtools_scheme(base::ASCIIToUTF16(kChromeDevToolsScheme));
WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(devtools_scheme);
+
+ // view-source:
+ WebString view_source_scheme(base::ASCIIToUTF16(kViewSourceScheme));
+ WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(view_source_scheme);
}
void RenderThreadImpl::NotifyTimezoneChange() {

Powered by Google App Engine
This is Rietveld 408576698