Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1187)

Side by Side Diff: Source/core/fetch/FetchRequest.cpp

Issue 47923008: Block execution of failed 'crossorigin' <script>s. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Remove RequestOriginPolicy + suggested improvements Created 7 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2012 Google, Inc. All rights reserved. 2 * Copyright (C) 2012 Google, Inc. All rights reserved.
3 * 3 *
4 * Redistribution and use in source and binary forms, with or without 4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions 5 * modification, are permitted provided that the following conditions
6 * are met: 6 * are met:
7 * 1. Redistributions of source code must retain the above copyright 7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer. 8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright 9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the 10 * notice, this list of conditions and the following disclaimer in the
(...skipping 50 matching lines...) Expand 10 before | Expand all | Expand 10 after
61 , m_forPreload(false) 61 , m_forPreload(false)
62 , m_defer(NoDefer) 62 , m_defer(NoDefer)
63 { 63 {
64 m_options.initiatorInfo = initiator; 64 m_options.initiatorInfo = initiator;
65 } 65 }
66 66
67 FetchRequest::~FetchRequest() 67 FetchRequest::~FetchRequest()
68 { 68 {
69 } 69 }
70 70
71 void FetchRequest::setPotentiallyCrossOriginEnabled(SecurityOrigin* origin, Stor edCredentials allowCredentials) 71 void FetchRequest::setCrossOriginAccessControl(SecurityOrigin* origin, StoredCre dentials allowCredentials)
72 { 72 {
73 updateRequestForAccessControl(m_resourceRequest, origin, allowCredentials); 73 updateRequestForAccessControl(m_resourceRequest, origin, allowCredentials);
74 ASSERT(m_options.requestOriginPolicy == UseDefaultOriginRestrictionsForType) ; // Allows only tightening from the default value.
75 m_options.requestOriginPolicy = PotentiallyCrossOriginEnabled;
76 } 74 }
77 75
78 } // namespace WebCore 76 } // namespace WebCore
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698