Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(60)

Issue 50573004: Don't set document.domain to an IP address fragment. (Closed)

Created:
7 years, 1 month ago by Tom Sepez
Modified:
7 years, 1 month ago
Reviewers:
abarth-chromium
CC:
blink-reviews, dglazkov+blink, eae+blinkwatch, adamk+blink_chromium.org
Visibility:
Public.

Description

Don't set document.domain to an IP address fragment. Remove duplicated logic in Document.cpp and force the decision-making into the existing weborigin/ code which makes the decision properly. Adds a setting to permit tests that rely on 0.0.1 being a super-domain of 127.0.0.1. BUG=312489 Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=161101

Patch Set 1 #

Patch Set 2 : Fix most tests #

Patch Set 3 : Remove portions of tests that can't be tested anymore. #

Patch Set 4 : Retry in face of 500s #

Patch Set 5 : Fix component build #

Patch Set 6 : missing weboriginexport header #

Unified diffs Side-by-side diffs Delta from patch set Stats (+58 lines, -92 lines) Patch
M LayoutTests/http/tests/security/aboutBlank/security-context-alias.html View 1 1 chunk +4 lines, -1 line 0 comments Download
M LayoutTests/http/tests/security/aboutBlank/security-context-grandchildren-alias.html View 1 1 chunk +3 lines, -0 lines 0 comments Download
M LayoutTests/http/tests/security/calling-versus-current.html View 1 1 chunk +3 lines, -0 lines 0 comments Download
M LayoutTests/http/tests/security/create-document-change-domain.html View 1 2 1 chunk +3 lines, -16 lines 0 comments Download
M LayoutTests/http/tests/security/create-document-change-domain-expected.txt View 1 2 1 chunk +1 line, -9 lines 0 comments Download
M LayoutTests/http/tests/security/document-clone-node-change-domain.html View 1 2 1 chunk +3 lines, -16 lines 0 comments Download
M LayoutTests/http/tests/security/document-clone-node-change-domain-expected.txt View 1 2 1 chunk +1 line, -9 lines 0 comments Download
M LayoutTests/http/tests/security/postMessage/origin-unaffected-by-document-domain.html View 1 1 chunk +3 lines, -0 lines 0 comments Download
M LayoutTests/http/tests/security/setDomainRelaxationForbiddenForURLScheme.html View 1 1 chunk +3 lines, -0 lines 0 comments Download
M LayoutTests/http/tests/workers/worker-document-domain-security.html View 1 1 chunk +3 lines, -0 lines 0 comments Download
M LayoutTests/http/tests/xmlhttprequest/document-domain-set.html View 1 1 chunk +3 lines, -0 lines 0 comments Download
M Source/core/dom/Document.cpp View 1 2 3 4 2 chunks +6 lines, -32 lines 0 comments Download
M Source/core/page/Settings.in View 1 1 chunk +1 line, -0 lines 0 comments Download
M Source/weborigin/OriginAccessEntry.h View 1 2 3 4 5 1 chunk +16 lines, -5 lines 0 comments Download
M Source/weborigin/OriginAccessEntry.cpp View 1 2 chunks +3 lines, -2 lines 0 comments Download
M Source/weborigin/SecurityPolicy.cpp View 1 2 chunks +2 lines, -2 lines 0 comments Download

Messages

Total messages: 8 (0 generated)
Tom Sepez
Adam, I really like this refactoring, since it solves a problem by removing code, but ...
7 years, 1 month ago (2013-10-29 22:06:49 UTC) #1
abarth-chromium
This change is really good. For the tests, maybe we want a setting that skips ...
7 years, 1 month ago (2013-10-30 06:30:50 UTC) #2
Tom Sepez
Adam, patchset 2 nearly resolves the issue with testing and IP addresses used as domains. ...
7 years, 1 month ago (2013-10-30 23:27:40 UTC) #3
abarth-chromium
On 2013/10/30 23:27:40, Tom Sepez wrote: > Adam, patchset 2 nearly resolves the issue with ...
7 years, 1 month ago (2013-10-31 02:35:08 UTC) #4
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-status.appspot.com/cq/tsepez@chromium.org/50573004/150001
7 years, 1 month ago (2013-10-31 20:34:13 UTC) #5
commit-bot: I haz the power
Sorry for I got bad news for ya. Compile failed with a clobber build on ...
7 years, 1 month ago (2013-10-31 21:11:11 UTC) #6
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-status.appspot.com/cq/tsepez@chromium.org/50573004/340001
7 years, 1 month ago (2013-10-31 21:43:55 UTC) #7
commit-bot: I haz the power
7 years, 1 month ago (2013-10-31 23:24:59 UTC) #8
Message was sent while issue was closed.
Change committed as 161101

Powered by Google App Engine
This is Rietveld 408576698