Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(870)

Unified Diff: Source/core/fetch/ResourceFetcher.cpp

Issue 302283002: Block mixed content fonts. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Test. Created 6 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « LayoutTests/http/tests/security/mixedContent/resources/frame-with-insecure-font.html ('k') | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: Source/core/fetch/ResourceFetcher.cpp
diff --git a/Source/core/fetch/ResourceFetcher.cpp b/Source/core/fetch/ResourceFetcher.cpp
index 3d9e42a7b080a4bf1a3c2c498d9627995055ba1e..3e810e026a71f20d39532059b7df3ad7c9867fc2 100644
--- a/Source/core/fetch/ResourceFetcher.cpp
+++ b/Source/core/fetch/ResourceFetcher.cpp
@@ -422,10 +422,15 @@ bool ResourceFetcher::checkInsecureContent(Resource::Type type, const KURL& url,
treatment = TreatAsActiveContent;
break;
+ case Resource::Font:
+ // These resources are passive, but mixed usage is low enough that we
+ // can block them in a mixed context.
+ treatment = TreatAsActiveContent;
+ break;
+
case Resource::TextTrack:
case Resource::Raw:
case Resource::Image:
- case Resource::Font:
case Resource::Media:
// These resources can corrupt only the frame's pixels.
treatment = TreatAsPassiveContent;
« no previous file with comments | « LayoutTests/http/tests/security/mixedContent/resources/frame-with-insecure-font.html ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698