commit | c1b6d6a2b7a6e834bdeeca93269cfaffb123a086 | [log] [tgz] |
---|---|---|
author | Yutaka Hirano <yhirano@chromium.org> | Wed Aug 15 09:19:32 2018 |
committer | Commit Bot <commit-bot@chromium.org> | Wed Aug 15 09:19:32 2018 |
tree | afe0cedb7931241d037de85de09075ea8fd1e022 | |
parent | f4694086e5d790f432c756af7d988a36f81dbd0c [diff] |
Remove per-client CORS checks Those are needed because a request could match with another request made by a foreign origin, but [1] fixed the issue. This is basically reverting [2]. Two layout tests are added to detect regressions. This CL changes the behavior a bit. Without this CL, - A response with a proper access-control-allow-origin header for a cross-origin request with "no-cors" mode is treated as non-opaque, and - A response without a proper access-control-allow-origin header for a same-origin request with "no-cors" mode redirected from a cross-origin resource is treated as opaque while with this CL, - A response with a proper access-control-allow-origin header for a cross-origin request with "no-cors" mode is treated as opaque, and - A response without a proper access-control-allow-origin header for a same-origin request with "no-cors" mode redirected from a cross-origin resource is treated as non-opaque. Also, before this CL, CORSStatus is calculated with an opaque origin for top-level worklet scripts. This CL changes that: now CORSStatus is calculated with the origin of the parent context, and so it stops muting error messages in worklets. 1: https://chromium.googlesource.com/chromium/src.git/+/c1df004861ab704945d31a0d207bb7f4c205e60c 2: https://chromium.googlesource.com/chromium/src.git/+/fad67a5b73639d7211b24fd9bdb242e82039b765 Bug: 809350, 799477 Change-Id: If28f59f6e6ac03a4d5992cca85801231748019bd Reviewed-on: https://chromium-review.googlesource.com/1158165 Commit-Queue: Yutaka Hirano <yhirano@chromium.org> Reviewed-by: Hiroshige Hayashizaki <hiroshige@chromium.org> Reviewed-by: Fredrik Söderquist <fs@opera.com> Reviewed-by: Kouhei Ueno <kouhei@chromium.org> Reviewed-by: Takashi Toyoshima <toyoshim@chromium.org> Cr-Commit-Position: refs/heads/master@{#583202}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .