commit | 9a31a7ea51e0c7548f4ed77f5007e4a924ef0fbb | [log] [tgz] |
---|---|---|
author | dpapad <dpapad@chromium.org> | Thu Apr 23 00:17:42 2020 |
committer | Commit Bot <commit-bot@chromium.org> | Thu Apr 23 00:17:42 2020 |
tree | c38470ef4ed7c9b2a8a00ea3c554dde03ed1edf2 | |
parent | c29c79b7251dfa4080a1dcc2dffbef0e79a1c851 [diff] |
Use parseHTMLSubset() in chrome://histograms. This prevents a maliciously created histogram name from injecting code (XSS) in the context of chrome://histograms. Fixed: 1073409 Change-Id: I75c9a26b95363cad4a470ed6488718421289961e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2161355 Commit-Queue: dpapad <dpapad@chromium.org> Auto-Submit: dpapad <dpapad@chromium.org> Reviewed-by: Alexei Svitkine <asvitkine@chromium.org> Cr-Commit-Position: refs/heads/master@{#761723}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .
For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.