Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(55)

Issue 2953453002: [Extensions Bindings] Add access checks in custom types (Closed)

Created:
3 years, 6 months ago by Devlin
Modified:
3 years, 6 months ago
Reviewers:
lazyboy, jbroman
CC:
chromium-apps-reviews_chromium.org, chromium-reviews, extensions-reviews_chromium.org
Target Ref:
refs/heads/master
Project:
chromium
Visibility:
Public.

Description

[Extensions Bindings] Add access checks in custom types Custom types (such as StorageArea and ChromeSetting/ContentSetting) don't go through the typical sendRequest flow from APIBinding, and thus avoid the access check that's there. Add an access check in these native types. BUG=653596 Review-Url: https://codereview.chromium.org/2953453002 Cr-Commit-Position: refs/heads/master@{#481559} Committed: https://chromium.googlesource.com/chromium/src/+/72276223d2147fb370ec646329f01482e2056931

Patch Set 1 : . #

Total comments: 2

Patch Set 2 : lazyboy's #

Unified diffs Side-by-side diffs Delta from patch set Stats (+92 lines, -37 lines) Patch
M chrome/test/data/extensions/api_test/bindings/unavailable_bindings_never_registered/background.js View 1 chunk +6 lines, -1 line 0 comments Download
M extensions/renderer/api_bindings_system.h View 1 chunk +2 lines, -1 line 0 comments Download
M extensions/renderer/api_bindings_system.cc View 1 chunk +1 line, -1 line 0 comments Download
M extensions/renderer/chrome_setting.h View 1 4 chunks +12 lines, -6 lines 0 comments Download
M extensions/renderer/chrome_setting.cc View 4 chunks +10 lines, -2 lines 0 comments Download
M extensions/renderer/content_setting.h View 1 4 chunks +13 lines, -7 lines 0 comments Download
M extensions/renderer/content_setting.cc View 3 chunks +11 lines, -3 lines 0 comments Download
M extensions/renderer/storage_area.h View 1 4 chunks +7 lines, -2 lines 0 comments Download
M extensions/renderer/storage_area.cc View 8 chunks +30 lines, -14 lines 0 comments Download

Messages

Total messages: 23 (17 generated)
Devlin
following https://codereview.chromium.org/2947843004/
3 years, 6 months ago (2017-06-20 23:03:35 UTC) #10
jbroman
lgtm
3 years, 6 months ago (2017-06-21 00:37:33 UTC) #11
lazyboy
lgtm https://codereview.chromium.org/2953453002/diff/60001/extensions/renderer/chrome_setting.h File extensions/renderer/chrome_setting.h (right): https://codereview.chromium.org/2953453002/diff/60001/extensions/renderer/chrome_setting.h#newcode75 extensions/renderer/chrome_setting.h:75: const BindingAccessChecker* access_checker_; nit: const BindingAccessChecker* 'const' access_checker_
3 years, 6 months ago (2017-06-22 00:10:25 UTC) #12
Devlin
https://codereview.chromium.org/2953453002/diff/60001/extensions/renderer/chrome_setting.h File extensions/renderer/chrome_setting.h (right): https://codereview.chromium.org/2953453002/diff/60001/extensions/renderer/chrome_setting.h#newcode75 extensions/renderer/chrome_setting.h:75: const BindingAccessChecker* access_checker_; On 2017/06/22 00:10:25, lazyboy wrote: > ...
3 years, 6 months ago (2017-06-22 15:49:55 UTC) #15
commit-bot: I haz the power
CQ is trying da patch. Follow status at: https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2953453002/80001
3 years, 6 months ago (2017-06-22 16:36:59 UTC) #20
commit-bot: I haz the power
3 years, 6 months ago (2017-06-22 16:40:42 UTC) #23
Message was sent while issue was closed.
Committed patchset #2 (id:80001) as
https://chromium.googlesource.com/chromium/src/+/72276223d2147fb370ec646329f0...

Powered by Google App Engine
This is Rietveld 408576698