Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code

Unified Diff: lib/child/utils.js

Issue 29352659: Issue 4406 - Treat about:srcdoc as not having an own security context, inherit document origin (Closed) Base URL: https://hg.adblockplus.org/adblockplus
Patch Set: Created Sept. 12, 2016, 11:57 a.m.
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: lib/child/utils.js
===================================================================
--- a/lib/child/utils.js
+++ b/lib/child/utils.js
@@ -96,16 +96,17 @@ let getFrames = exports.getFrames = func
}
// URLs like about:blank inherit their security context from upper-level
// frames, resolve their URLs accordingly.
for (let i = frames.length - 2; i >= 0; i--)
{
let frame = frames[i];
if (frame.location == "about:blank" || frame.location == "moz-safe-about:blank" ||
+ frame.location == "about:srcdoc" ||
Utils.netUtils.URIChainHasFlags(Utils.makeURI(frame.location), Ci.nsIProtocolHandler.URI_INHERITS_SECURITY_CONTEXT))
{
frame.location = frames[i + 1].location;
}
}
return frames;
};
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld