Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(424)

Unified Diff: third_party/WebKit/Source/core/html/HTMLFrameElementBase.h

Issue 2502783004: Don't skip security checks for javascript: URLs when the JS stack is empty. (Closed)
Patch Set: Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
diff --git a/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h b/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
index ed03c0aa4bf5d683bcc8c1810218d421be2526ae..4b3937b1c2a3a24c33d36c9ad6f861f8d744a6c0 100644
--- a/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
+++ b/third_party/WebKit/Source/core/html/HTMLFrameElementBase.h
@@ -41,7 +41,7 @@ class CORE_EXPORT HTMLFrameElementBase : public HTMLFrameOwnerElement {
protected:
HTMLFrameElementBase(const QualifiedName&, Document&);
- bool isURLAllowed() const;
+ bool isURLAllowed(bool fromLayout = false) const;
void parseAttribute(const QualifiedName&,
const AtomicString&,

Powered by Google App Engine
This is Rietveld 408576698