Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(436)

Unified Diff: chrome/browser/resources/gaia_auth/main.html

Issue 239143009: Disallow top-level navigation in gaia iframe (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: undo cros change Created 6 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/browser/resources/gaia_auth/main.html
diff --git a/chrome/browser/resources/gaia_auth/main.html b/chrome/browser/resources/gaia_auth/main.html
index 57e14f3b273f2d2846f2b5366d09a63606b8ea45..5cfdd7028b95b849b0cbae532af6011cce5c670f 100644
--- a/chrome/browser/resources/gaia_auth/main.html
+++ b/chrome/browser/resources/gaia_auth/main.html
@@ -8,6 +8,7 @@
<script src="main.js"></script>
</head>
<body>
- <iframe id="gaia-frame" name="gaia-frame" src="about:blank" frameborder="0"></iframe>
+ <iframe id="gaia-frame" name="gaia-frame" src="about:blank" frameborder="0"
+ sandbox="allow-same-origin allow-scripts allow-forms"></iframe>
</body>
</html>

Powered by Google App Engine
This is Rietveld 408576698