commit | 455363f3a2cf47eb04c13bc65cb80e72387d2252 | [log] [tgz] |
---|---|---|
author | Karan Bhatia <karandeepb@chromium.org> | Wed Jan 09 01:19:04 2019 |
committer | Commit Bot <commit-bot@chromium.org> | Wed Jan 09 01:19:04 2019 |
tree | a33188d8441688ff22059ad49943ea66efa7350f | |
parent | 605c81409282854868fb24ae94fe3a0cdd0518e4 [diff] |
WebRequest: Extensions intercepting navigation requests don't need access to initiator. This CL makes the following changes to the host permission model for the Web Request and Declarative Net Request APIs: - To intercept a navigation request (sub-frame or main-frame request), extensions don't need host permissions to the request initiator. They only need access to the request url. This is unlike sub-resource requests which need host permission to both the request url and initiator. - If an extension has access to a navigation request's initiator but it's access to the request url is withheld, the extension isn't implicitly granted access to the request. This is unlike sub-resource requests where the extension will be granted access. BUG=157736, 918137, 851722 Change-Id: I851bfbe79ea737b59934779367d581cdbb6c5297 Reviewed-on: https://chromium-review.googlesource.com/c/1396564 Commit-Queue: Karan Bhatia <karandeepb@chromium.org> Reviewed-by: Devlin <rdevlin.cronin@chromium.org> Cr-Commit-Position: refs/heads/master@{#620977}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .