commit | a2e46515f608b1318ce73acb0087ac40ff820432 | [log] [tgz] |
---|---|---|
author | Erik Jensen <rkjnsn@chromium.org> | Thu Jan 17 21:13:01 2019 |
committer | Commit Bot <commit-bot@chromium.org> | Thu Jan 17 21:13:01 2019 |
tree | 676684ca715a5f4db703229b64cbf020db3cf251 | |
parent | 76429cf690c3b5811b7b7ee868f62b4956d3cbea [diff] |
Don't save file transfers in elevated contexts. On Windows, impersonate the logged-in user (if any) before writing the file, aborting if impersonation fails, such as if at the log-in screen where there's no logged-in user. On MacOS, abort the transfer if running as root, which signifies that the host is running on the log-in screen. Note that this will not prevent uploads on the lock screen, as the OS still considers the user to be logged in, in that case. Bug: 679313 Change-Id: I8031473547c180e377ad858221de1ad2711813f8 Reviewed-on: https://chromium-review.googlesource.com/c/1398382 Commit-Queue: Erik Jensen <rkjnsn@chromium.org> Reviewed-by: Thomas Anderson <thomasanderson@chromium.org> Reviewed-by: Joe Downing <joedow@chromium.org> Cr-Commit-Position: refs/heads/master@{#623844}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .