Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(502)

Issue 2375623003: Revert of Allow top-level navigation in extension pop-ups if it only triggers a download. (Closed)

Created:
4 years, 2 months ago by Łukasz Anforowicz
Modified:
4 years, 2 months ago
Reviewers:
Charlie Reis, Devlin, sky
CC:
chromium-reviews, chromium-apps-reviews_chromium.org, extensions-reviews_chromium.org, site-isolation-reviews_chromium.org
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Revert of Allow top-level navigation in extension pop-ups if it only triggers a download. (patchset #12 id:220001 of https://codereview.chromium.org/2352083003/ ) Reason for revert: It seems that tests introduced in this CL are failing on some non-CQ bots: https://build.chromium.org/p/chromium.win/builders/Win10%20Tests%20x64/builds/4653 (and also 4654 and 4655). Original issue's description: > Block navigations in extensions via ShouldTransferNavigation (not via OpenURL). > > Before this CL, blocking of top-level navigations in extension pop-ups > was accomplished by routing them via OpenURL path and blocking (or > rather - silently dropping) CURRENT_TAB navigations via > ExtensionViewHost::OpenURLFromTab. This was problematic for a few > reasons: > > 1. This unnecessarily blocked navigations that end-up being treated > as downloads (i.e. because HTTP response says Content-Disposition: > attachment). This was the root cause of the regression raised in > https://crbug.com/646261 > > 2. There are still some remaining issues in handling of POST requests > via OpenURL path (e.g. dropping Content-Type header - > https://crbug.com/648648). > > 3. In the long-term we want to rely less on process isolation > accomplished via OpenURL - an exploited renderer process does not > necessarily have to go through OpenURL path and can instead choose > to use the regular, renderer-initiated path. > > After this CL: > > 1. ExtensionViewHost::ShouldTransferNavigation is used to block top-level > navigations in extension pop-ups (and background pages). > > 2. POST navigations do not go through OpenURL path anymore (i.e. this CL > effectively reverts the essence of r407586). > > In the long-term we want to make all extension navigations to not go > through OpenURL path, but this seems too risky to merge back to M54, > so for now we only do #1 above (i.e. avoid OpenURL only for POST > requests). > > BUG=646261 > CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:linux_site_isolation > > Committed: https://crrev.com/953f8c785a134b2b4bd9ff401ff27f7edef4172c > Cr-Commit-Position: refs/heads/master@{#421287} TBR=creis@chromium.org,rdevlin.cronin@chromium.org,sky@chromium.org # Skipping CQ checks because original CL landed less than 1 days ago. NOPRESUBMIT=true NOTREECHECKS=true NOTRY=true BUG=646261 Committed: https://crrev.com/20d7fecd2c5d88e2666743c8d53d9d2b2ea47395 Cr-Commit-Position: refs/heads/master@{#421360}

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+15 lines, -324 lines) Patch
M chrome/browser/extensions/api/extension_action/browser_action_apitest.cc View 5 chunks +2 lines, -200 lines 0 comments Download
M chrome/browser/extensions/extension_view_host.h View 1 chunk +0 lines, -1 line 0 comments Download
M chrome/browser/extensions/extension_view_host.cc View 1 chunk +0 lines, -8 lines 0 comments Download
M chrome/browser/extensions/process_management_browsertest.cc View 2 chunks +0 lines, -54 lines 0 comments Download
M chrome/browser/prerender/prerender_contents.cc View 1 chunk +1 line, -1 line 0 comments Download
M chrome/renderer/chrome_content_renderer_client.cc View 1 chunk +0 lines, -10 lines 0 comments Download
D chrome/test/data/extensions/api_test/browser_action/popup_with_form/manifest.json View 1 chunk +0 lines, -9 lines 0 comments Download
D chrome/test/data/extensions/api_test/browser_action/popup_with_form/other_page.html View 1 chunk +0 lines, -6 lines 0 comments Download
D chrome/test/data/extensions/api_test/browser_action/popup_with_form/popup.html View 1 chunk +0 lines, -14 lines 0 comments Download
D chrome/test/data/extensions/api_test/browser_action/popup_with_form/popup.js View 1 chunk +0 lines, -7 lines 0 comments Download
M content/browser/cross_site_transfer_browsertest.cc View 1 chunk +1 line, -1 line 0 comments Download
M content/browser/frame_host/navigation_request.cc View 1 chunk +3 lines, -2 lines 0 comments Download
M content/browser/frame_host/navigator_delegate.h View 1 chunk +1 line, -1 line 0 comments Download
M content/browser/frame_host/navigator_delegate.cc View 1 chunk +1 line, -2 lines 0 comments Download
M content/browser/frame_host/navigator_impl.cc View 1 chunk +1 line, -2 lines 0 comments Download
M content/browser/web_contents/web_contents_impl.h View 1 chunk +1 line, -1 line 0 comments Download
M content/browser/web_contents/web_contents_impl.cc View 1 chunk +2 lines, -2 lines 0 comments Download
M content/public/browser/web_contents_delegate.h View 1 chunk +1 line, -1 line 0 comments Download
M content/public/browser/web_contents_delegate.cc View 1 chunk +1 line, -2 lines 0 comments Download

Messages

Total messages: 6 (2 generated)
Łukasz Anforowicz
Created Revert of Allow top-level navigation in extension pop-ups if it only triggers a download.
4 years, 2 months ago (2016-09-27 22:22:20 UTC) #2
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2375623003/1
4 years, 2 months ago (2016-09-27 22:22:41 UTC) #3
commit-bot: I haz the power
Committed patchset #1 (id:1)
4 years, 2 months ago (2016-09-27 22:23:45 UTC) #4
commit-bot: I haz the power
4 years, 2 months ago (2016-09-27 22:25:12 UTC) #6
Message was sent while issue was closed.
Patchset 1 (id:??) landed as
https://crrev.com/20d7fecd2c5d88e2666743c8d53d9d2b2ea47395
Cr-Commit-Position: refs/heads/master@{#421360}

Powered by Google App Engine
This is Rietveld 408576698