Google Git
Sign in
chromium / chromium / src / de11fb8865d96b962525283aa6e1f564a6f0e3b7
commitde11fb8865d96b962525283aa6e1f564a6f0e3b7[log] [tgz]
authorNick Burris <nburris@chromium.org>Wed May 11 14:06:13 2022
committerChromium LUCI CQ <chromium-scoped@luci-project-accounts.iam.gserviceaccount.com>Wed May 11 14:06:13 2022
tree9e8cd151f08253daedea5038a08f3ca4504d7759
parent31f8a108d11161086292d3c262b73da3357135b5 [diff]
[SPC] Require user activation for cross-origin enrollment

This adds a user activation check and consumption for the enrollment of
a credential with the payment extension in a cross-origin frame.

Test coverage is added to the SPC iframe enrollment WPTs, and the
existing SPC authentication WPTs validate that this does not apply to
same-origin credential enrollments. Also tested manually on
https://rsolomakhin.github.io/pr/spc-iframe-no-ph/.

Intent to ship:
https://groups.google.com/a/chromium.org/g/blink-dev/c/GSoWLFb_jF0

Bug: 1322603
Change-Id: I5bca6d3fdf9a8687fa5d9d08b162287e1e7e4f98
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3584295
Commit-Queue: Nick Burris <nburris@chromium.org>
Reviewed-by: Stephen McGruer <smcgruer@chromium.org>
Reviewed-by: Ken Buchanan <kenrb@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1002052}
5 files changed
tree: 9e8cd151f08253daedea5038a08f3ca4504d7759
  1. android_webview/
  2. apps/
  3. ash/
  4. base/
  5. build/
  6. build_overrides/
  7. buildtools/
  8. cc/
  9. chrome/
  10. chromecast/
  11. chromeos/
  12. codelabs/
  13. components/
  14. content/
  15. courgette/
  16. crypto/
  17. dbus/
  18. device/
  19. docs/
  20. extensions/
  21. fuchsia/
  22. gin/
  23. google_apis/
  24. google_update/
  25. gpu/
  26. headless/
  27. infra/
  28. ios/
  29. ipc/
  30. media/
  31. mojo/
  32. native_client_sdk/
  33. net/
  34. pdf/
  35. ppapi/
  36. printing/
  37. remoting/
  38. rlz/
  39. sandbox/
  40. services/
  41. skia/
  42. sql/
  43. storage/
  44. styleguide/
  45. testing/
  46. third_party/
  47. tools/
  48. ui/
  49. url/
  50. weblayer/
  51. .clang-format
  52. .clang-tidy
  53. .eslintrc.js
  54. .git-blame-ignore-revs
  55. .gitattributes
  56. .gitignore
  57. .gn
  58. .mailmap
  59. .rustfmt.toml
  60. .vpython
  61. .vpython3
  62. .yapfignore
  63. AUTHORS
  64. BUILD.gn
  65. CODE_OF_CONDUCT.md
  66. codereview.settings
  67. DEPS
  68. DIR_METADATA
  69. ENG_REVIEW_OWNERS
  70. LICENSE
  71. LICENSE.chromium_os
  72. OWNERS
  73. PRESUBMIT.py
  74. PRESUBMIT_test.py
  75. PRESUBMIT_test_mocks.py
  76. README.md
  77. WATCHLISTS
README.md

Logo Chromium

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

The project's web site is https://www.chromium.org.

To check out the source code locally, don't use git clone! Instead, follow the instructions on how to get the code.

Documentation in the source is rooted in docs/README.md.

Learn how to Get Around the Chromium Source Code Directory Structure .

For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.

If you found a bug, please file it at https://crbug.com/new.