commit | 3519e867dc606437f804561f889d7ed95b95876a | [log] [tgz] |
---|---|---|
author | Eric Lawrence <elawrence@chromium.org> | Tue Nov 07 03:21:46 2017 |
committer | Commit Bot <commit-bot@chromium.org> | Tue Nov 07 03:21:46 2017 |
tree | b1a8686262a827cf594d9af0035c6e28b33f2687 | |
parent | 6262850244518f2b9736581268505d6b7b489e31 [diff] |
Don't sniff HTML from documents delivered via the file protocol To reduce attack surface, Chrome should not MIME-sniff to text/html for any document delivered via the file protocol. This change only impacts the file protocol (documents served via HTTP/HTTPS/etc are unaffected). Bug: 777737 Cq-Include-Trybots: master.tryserver.chromium.android:android_cronet_tester;master.tryserver.chromium.mac:ios-simulator-cronet Change-Id: I7086454356b8d2d092be9e1bca0f5ff6dd3b62c0 Reviewed-on: https://chromium-review.googlesource.com/751402 Reviewed-by: Ben Wells <benwells@chromium.org> Reviewed-by: Sylvain Defresne <sdefresne@chromium.org> Reviewed-by: Achuith Bhandarkar <achuith@chromium.org> Reviewed-by: Asanka Herath <asanka@chromium.org> Reviewed-by: Matt Menke <mmenke@chromium.org> Commit-Queue: Eric Lawrence <elawrence@chromium.org> Cr-Commit-Position: refs/heads/master@{#514372}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .