tree 92f8a261dd9207edad6ff431f5079fd033400989
parent b717651264109d1ac96e922431b7b846ba8d599f
author Tom McKee <tommckee@chromium.org> 1642611116 -0800
committer Blink WPT Bot <blink-w3c-test-autoroller@chromium.org> 1642612146 -0800

[ResourceTiming]: Don't expose nextHopProtocol when TAO fails

The nextHopProtocol attribute was originally special-cased to be exposed
for 'non-document' destinations even if the Timing-Allow-Origin check
failed. This CL removes the special case so that nextHopProtocol behaves
like the other potentially-sensitive fields of PerformanceResourceTiming
entries; the protocol string will only be exposed for same-origin
requests or when the Timing-Allow-Origin header matches the requester's
origin.

BUG=1184726

Change-Id: I5d758a2263373636fdf23be97bdc642489c0cf93
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3354335
Reviewed-by: Nicolás Peña <npm@chromium.org>
Commit-Queue: Tom McKee <tommckee@chromium.org>
Cr-Commit-Position: refs/heads/main@{#960981}