tree 018cd2d29111bb12bf8bba4eebc3314dbe585bff
parent 8d058412d7334ac4ff0ced7653f90ffefe1446af
author Daniel Cheng <dcheng@chromium.org> 1504846829 +0000
committer Commit Bot <commit-bot@chromium.org> 1504846829 +0000

Manually propagate sandbox flags to documents transformed by XSLT

Normally, this would Just Work but the combination of MHTML and XSLT
ends up resulting in a weird interaction. MHTML enforces sandbox flags
on a per-document basis, rather than forcing them on the frame: this
makes sense, since the sandbox flags enforced by a MHTML document should
not apply on subsequent pages. However, XSLT installs a new document to
hold the transformed content. When installing a new Document, the
effective sandbox flags from the FrameLoader are applied--but MHTML only
applied them to the Document, so FrameLoader doesn't know about them.
This fix is to manually propagate the flags for XSLT...

Bug: 762930
Change-Id: I29efb0713195febb1ff4e8af7fd27ba1230abab4
Reviewed-on: https://chromium-review.googlesource.com/656397
Reviewed-by: Kouhei Ueno <kouhei@chromium.org>
Commit-Queue: Daniel Cheng <dcheng@chromium.org>
Cr-Commit-Position: refs/heads/master@{#500510}