Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(120)

Issue 240533006: Make window.showModalDialog disabled at runtime (Closed)

Created:
6 years, 8 months ago by eseidel
Modified:
6 years, 8 months ago
Reviewers:
abarth-chromium
CC:
blink-reviews, arv+blink, Inactive, watchdog-blink-watchlist_google.com
Visibility:
Public.

Description

Make window.showModalDialog disabled at runtime We would like to remove showModalDialog based on its low usage (as high as ~120 of every 1M reported page views on week days and as low as ~60 of 1M reported page views on weekends) and extremely high complexity (showModalDialog requires running a nested event loop at a arbitrary point inside a renderer which then allows display of arbitrary web content and execution of arbitrary JavaScript inside this nested context). 60 views per million is our historical removal threshold so this is a higher risk removal, however the unique complexity and regular reports of security bugs has pushed for an accelerated removal. Mozilla has also long-deprecated showModalDialog and is also considering removal: https://bugzilla.mozilla.org/show_bug.cgi?id=981796 Intent To Remove thread has much more info: https://groups.google.com/a/chromium.org/d/msg/blink-dev/xh9fPX0ijqk/ixHZCOH6GLgJ We removed showModalDialog from M35 Beta, but reverted the changes before shipping. This removes showModalDialog from M36 via a runtime flag which will allow us to enable/disable with much lower risk as the feature is still present in our testing configuration while being diabled from our shipping configuration. BUG=345831 Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=171889

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+6 lines, -1 line) Patch
M Source/core/frame/Window.idl View 1 chunk +1 line, -1 line 0 comments Download
M Source/platform/RuntimeEnabledFeatures.in View 1 chunk +5 lines, -0 lines 0 comments Download

Messages

Total messages: 7 (0 generated)
abarth-chromium
LGTM
6 years, 8 months ago (2014-04-17 18:29:27 UTC) #1
abarth-chromium
The CQ bit was checked by abarth@chromium.org
6 years, 8 months ago (2014-04-17 18:29:30 UTC) #2
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-status.appspot.com/cq/eseidel@chromium.org/240533006/1
6 years, 8 months ago (2014-04-17 18:29:43 UTC) #3
eseidel
The CQ bit was unchecked by eseidel@chromium.org
6 years, 8 months ago (2014-04-17 18:29:45 UTC) #4
eseidel
The CQ bit was checked by eseidel@chromium.org
6 years, 8 months ago (2014-04-17 18:29:46 UTC) #5
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-status.appspot.com/cq/eseidel@chromium.org/240533006/1
6 years, 8 months ago (2014-04-17 18:30:05 UTC) #6
commit-bot: I haz the power
6 years, 8 months ago (2014-04-17 21:05:44 UTC) #7
Message was sent while issue was closed.
Change committed as 171889

Powered by Google App Engine
This is Rietveld 408576698