| commit | fb6eeb6dde866fbe9b48b62311eb6cc48771fc70 | [log] [tgz] |
|---|---|---|
| author | creis <creis@chromium.org> | Tue May 10 19:01:51 2016 |
| committer | Commit bot <commit-bot@chromium.org> | Tue May 10 19:04:24 2016 |
| tree | 8e3de68583f0638ac5fcc101421d44d02af9b0f2 | |
| parent | 57a51d6f7b4fcaa63d303f465fdb6b360495531c [diff] |
Kill renderer if it changes the main frame's origin on subframe commits. This is hopefully safe after the fix for 597322. It's a useful second line of defense against URL spoofs. BUG=486916, 597322 TEST=No NC_AUTO_SUBFRAME kills CQ_INCLUDE_TRYBOTS=tryserver.chromium.linux:linux_site_isolation Review-Url: https://codereview.chromium.org/1960983002 Cr-Commit-Position: refs/heads/master@{#392666}