Apply ScrLike truncation to base href attribute's URL

Apply ScrLike truncation to base href attribute's URL

Otherwise, the same techniques can be applied to it as with
other kinds of injected URLs.

Committed: https://crrev.com/b60f49a81f8dc8d9b9b88cb2707a25751acd9682
Cr-Commit-Position: refs/heads/master@{#396931}

[Tom Sepez, 2016-05-19 17:49:21]

tsepez@chromium.org changed reviewers:
+ mkwst@chromium.org

[Tom Sepez, 2016-05-19 17:49:22]

Mike, for review. Minor oversight here in passing the right flag when filtering
the attribute.

[Tom Sepez, 2016-05-19 17:50:59]

https://codereview.chromium.org/1998743002/diff/1/third_party/WebKit/LayoutTe...
File
third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/base-href-unterminated-expected.txt
(right):

https://codereview.chromium.org/1998743002/diff/1/third_party/WebKit/LayoutTe...
third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/base-href-unterminated-expected.txt:2:
ALERT: This is a safe script.
Note: This runs because the base tag is igonred, and we fetch the script from
the original origin (IsLikelySafeSameOriginResource exception).

[Mike West, 2016-05-30 11:03:12]

LGTM! Sorry for the delay on this tiny CL, I was OOO.

[Tom Sepez, 2016-05-31 16:39:00]

The CQ bit was checked by tsepez@chromium.org

[commit-bot: I haz the power, 2016-05-31 16:39:18]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1998743002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1998743002/1

[commit-bot: I haz the power, 2016-05-31 21:14:11]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-05-31 21:16:17]

Description was changed from

==========
Apply ScrLike truncation to base href attribute's URL

Otherwise, the same techniques can be applied to it as with
other kinds of injected URLs.
==========

to

==========
Apply ScrLike truncation to base href attribute's URL

Otherwise, the same techniques can be applied to it as with
other kinds of injected URLs.

Committed: https://crrev.com/b60f49a81f8dc8d9b9b88cb2707a25751acd9682
Cr-Commit-Position: refs/heads/master@{#396931}
==========

[commit-bot: I haz the power, 2016-05-31 21:16:18]

Patchset 1 (id:??) landed as
https://crrev.com/b60f49a81f8dc8d9b9b88cb2707a25751acd9682
Cr-Commit-Position: refs/heads/master@{#396931}