Google Git
Sign in
chromium / chromium / src / fcbae4f06caaf56d0cea2e42d78ca651277b8342
commitfcbae4f06caaf56d0cea2e42d78ca651277b8342[log] [tgz]
authorDylan Cutler <dylancutler@google.com>Wed Nov 01 20:32:49 2023
committerChromium LUCI CQ <chromium-scoped@luci-project-accounts.iam.gserviceaccount.com>Wed Nov 01 20:32:49 2023
tree6f554616e786ceb59ceb3138b70d883bec219f6f
parentb88df2d6cd98e8ad9886c48fce79e50a946c229b [diff]
Workaround for 3PCB when rendering sandboxed media

When 3PCB is enabled, access-controlled media URLs that
are served with "Content-Security-Policy: sandbox" will be
broken when it is loaded as the top-level URL.

This includes static media types where there is little privacy
or security risk to allowing cookies to be send for the data
request when the media is being loaded as the top-level document.

The CL patches this by overriding Document::SiteForCookies in these
specific cases. To be cautious, this is only done in the
MediaDocumentParser.

Bug: 1475014
Change-Id: I5b14785394ce6c230ab2a970097582b2b07c5c1c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4980051
Commit-Queue: Dylan Cutler <dylancutler@google.com>
Reviewed-by: Nate Chapin <japhet@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1218420}
4 files changed
tree: 6f554616e786ceb59ceb3138b70d883bec219f6f
  1. android_webview/
  2. apps/
  3. ash/
  4. base/
  5. build/
  6. build_overrides/
  7. buildtools/
  8. cc/
  9. chrome/
  10. chromecast/
  11. chromeos/
  12. codelabs/
  13. components/
  14. content/
  15. courgette/
  16. crypto/
  17. dbus/
  18. device/
  19. docs/
  20. extensions/
  21. fuchsia_web/
  22. gin/
  23. google_apis/
  24. google_update/
  25. gpu/
  26. headless/
  27. infra/
  28. ios/
  29. ipc/
  30. media/
  31. mojo/
  32. native_client_sdk/
  33. net/
  34. pdf/
  35. ppapi/
  36. printing/
  37. remoting/
  38. rlz/
  39. sandbox/
  40. services/
  41. skia/
  42. sql/
  43. storage/
  44. styleguide/
  45. testing/
  46. third_party/
  47. tools/
  48. ui/
  49. url/
  50. webkit/
  51. clank
  52. internal
  53. ios_internal
  54. native_client
  55. signing_keys
  56. v8
  57. .clang-format
  58. .clang-tidy
  59. .eslintrc.js
  60. .git-blame-ignore-revs
  61. .gitattributes
  62. .gitignore
  63. .gitmodules
  64. .gn
  65. .mailmap
  66. .rustfmt.toml
  67. .vpython3
  68. .yapfignore
  69. ATL_OWNERS
  70. AUTHORS
  71. BUILD.gn
  72. CODE_OF_CONDUCT.md
  73. codereview.settings
  74. DEPS
  75. DIR_METADATA
  76. LICENSE
  77. LICENSE.chromium_os
  78. OWNERS
  79. PRESUBMIT.py
  80. PRESUBMIT_test.py
  81. PRESUBMIT_test_mocks.py
  82. README.md
  83. WATCHLISTS
README.md

Logo Chromium

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

The project's web site is https://www.chromium.org.

To check out the source code locally, don't use git clone! Instead, follow the instructions on how to get the code.

Documentation in the source is rooted in docs/README.md.

Learn how to Get Around the Chromium Source Code Directory Structure .

For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.

If you found a bug, please file it at https://crbug.com/new.