Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(674)

Unified Diff: content/browser/frame_host/render_frame_host_impl.h

Issue 2062523002: Fixing renderer's access to a file from HTTP POST (after a xsite transfer). (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Fixing Windows build. Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: content/browser/frame_host/render_frame_host_impl.h
diff --git a/content/browser/frame_host/render_frame_host_impl.h b/content/browser/frame_host/render_frame_host_impl.h
index ff79b6539d8f71c412fb3d6fc03184722e22f48d..f35a2f50445688975375f3f365ca6b3c3c24851d 100644
--- a/content/browser/frame_host/render_frame_host_impl.h
+++ b/content/browser/frame_host/render_frame_host_impl.h
@@ -732,6 +732,12 @@ class CONTENT_EXPORT RenderFrameHostImpl : public RenderFrameHost,
// Informs the content client that geolocation permissions were used.
void DidUseGeolocationPermission();
+ // Grants the current RenderProcessHost read access to any file listed in
+ // |body|. It is important that the ResourceRequestBody has been validated
+ // upon receipt from the renderer process to prevent it from forging access to
+ // files without the user's consent.
+ void GrantFileAccessFromResourceRequestBody(const ResourceRequestBody& body);
+
void UpdatePermissionsForNavigation(
const CommonNavigationParams& common_params,
const RequestNavigationParams& request_params);

Powered by Google App Engine
This is Rietveld 408576698