DescriptionDon't allow GuestView JS objects to inherit global prototype.
Allowing objects like GuestViewImpl and GuestViewContainer to
inherit prototypes from the global JS object can allow arbitrary user
code to be attached to these objects, and potentially executed.
This CL prevents this by forcing the inherited __proto__ objects
to be null.
BUG=695476
Review-Url: https://codereview.chromium.org/2712913005
Cr-Commit-Position: refs/heads/master@{#452976}
(cherry picked from commit 5934185d281ff83961832317620da5468e7cf703)
Review-Url: https://codereview.chromium.org/2730383002 .
Cr-Commit-Position: refs/branch-heads/2987@{#769}
Cr-Branched-From: ad51088c0e8776e8dcd963dbe752c4035ba6dab6-refs/heads/master@{#444943}
Committed: https://chromium.googlesource.com/chromium/src/+/c7ea20cf7c8188d36a92be706a234afef673235f
Patch Set 1 #
Messages
Total messages: 2 (1 generated)
|