Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(394)

Unified Diff: third_party/WebKit/Source/core/html/HTMLFrameElementBase.h

Issue 2183423002: Only do security checks on javascript: URLs for frames for loading (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 4 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
diff --git a/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h b/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
index 6e9cf68a0f36e9ced892fccaa58b264f6cf8f507..40250204fc91b1a5eeddc5d92310516fd82ea982 100644
--- a/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
+++ b/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
@@ -41,7 +41,8 @@ public:
protected:
HTMLFrameElementBase(const QualifiedName&, Document&);
- bool isURLAllowed() const;
+ enum ReasonForCallingURLAllowed { WillLoadURL, WillNotLoadURL };
+ bool isURLAllowed(ReasonForCallingURLAllowed) const;
void parseAttribute(const QualifiedName&, const AtomicString&, const AtomicString&) override;
InsertionNotificationRequest insertedInto(ContainerNode*) override;

Powered by Google App Engine
This is Rietveld 408576698