diff options
author | Ben Wells <benwells@chromium.org> | 2015-04-21 14:00:34 +1000 |
---|---|---|
committer | Ben Wells <benwells@chromium.org> | 2015-04-21 04:01:55 +0000 |
commit | 5aba40cebe8c915c114f3d6ffd10a0c29f0f77d8 (patch) | |
tree | 65f984cbda4cecb17d8acb9da6b3cbbdbcb0debb /cc/animation/animation_curve.h | |
parent | 2fb57e2b1cb54c8bcbb33936ec9f3c5552cf0376 (diff) | |
download | chromium_src-5aba40cebe8c915c114f3d6ffd10a0c29f0f77d8.zip chromium_src-5aba40cebe8c915c114f3d6ffd10a0c29f0f77d8.tar.gz chromium_src-5aba40cebe8c915c114f3d6ffd10a0c29f0f77d8.tar.bz2 |
Truncate long URL fragments in Android page info popup
This replaces percent-encoding whitespace as a method to combat the use
of crafted URL fragments to inject messages into the page info popup. By
truncating the URL so that at most two lines of the fragment are shown,
we prevent lengthy messages from being injected while minimising the
effect on most URLs.
BUG=466351
Review URL: https://codereview.chromium.org/1077483002
Merged from trunk.
TBR=tedchoc@chromium.org
Cr-Commit-Position: refs/heads/master@{#325358}
(cherry picked from commit 5bf8a2dccf4777c5f065d918d1d9a2bbaa013f9f)
Review URL: https://codereview.chromium.org/1061533006
Cr-Commit-Position: refs/branch-heads/2357@{#175}
Cr-Branched-From: 59d4494849b405682265ed5d3f5164573b9a939b-refs/heads/master@{#323860}
Diffstat (limited to 'cc/animation/animation_curve.h')
0 files changed, 0 insertions, 0 deletions