commit | 58b5d61eb090fbe8aa6dfea4172b43df2e3845b0 | [log] [tgz] |
---|---|---|
author | Takashi Toyoshima <toyoshim@chromium.org> | Wed Apr 18 09:52:30 2018 |
committer | Commit Bot <commit-bot@chromium.org> | Wed Apr 18 09:52:30 2018 |
tree | fa7cf413034602a88140a87045fcea2dd41e95d4 | |
parent | 9203d324d7584aec736a0955fd111dee3277f622 [diff] |
OOR-CORS: strip username and password in CORSURLLoader In the legacy Blink CORS, these information are stripped in DocumentThreadableLoader in MakeCrossOriginAccessRequest(). Current OOR-CORS implementation only has DCHECKS for them, but hasn't stripped. Bug: 803766 Cq-Include-Trybots: master.tryserver.chromium.linux:linux_mojo Change-Id: If1a4657804215a8ce9a302acb658f9407348a79a Reviewed-on: https://chromium-review.googlesource.com/999672 Commit-Queue: Takashi Toyoshima <toyoshim@chromium.org> Reviewed-by: Yutaka Hirano <yhirano@chromium.org> Cr-Commit-Position: refs/heads/master@{#551621}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .