diff options
| author | abarth@chromium.org <abarth@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-05-30 05:25:17 +0000 |
|---|---|---|
| committer | abarth@chromium.org <abarth@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-05-30 05:25:17 +0000 |
| commit | f0af6a7ccfde1fb8068f89b190337c1a8ef99890 (patch) | |
| tree | 15ab1d791684e29cf46e9eb8032abb40faf32746 /chrome/browser | |
| parent | b664c3c97b36f6cb1a831641ca1b42e90f259b1b (diff) | |
| download | chromium_src-f0af6a7ccfde1fb8068f89b190337c1a8ef99890.zip chromium_src-f0af6a7ccfde1fb8068f89b190337c1a8ef99890.tar.gz chromium_src-f0af6a7ccfde1fb8068f89b190337c1a8ef99890.tar.bz2 | |
Enforce a max length for document titles.
R=deanm
BUG=http://crbug.com/12810
TEST=None
Review URL: http://codereview.chromium.org/113969
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@17282 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser')
| -rw-r--r-- | chrome/browser/renderer_host/render_view_host.cc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/chrome/browser/renderer_host/render_view_host.cc b/chrome/browser/renderer_host/render_view_host.cc index 421615f..826ca6d 100644 --- a/chrome/browser/renderer_host/render_view_host.cc +++ b/chrome/browser/renderer_host/render_view_host.cc @@ -34,6 +34,7 @@ #include "chrome/common/render_messages.h" #include "chrome/common/result_codes.h" #include "chrome/common/chrome_switches.h" +#include "chrome/common/chrome_constants.h" #include "chrome/common/thumbnail_score.h" #include "chrome/common/url_constants.h" #include "net/base/net_util.h" @@ -952,6 +953,10 @@ void RenderViewHost::OnMsgUpdateState(int32 page_id, void RenderViewHost::OnMsgUpdateTitle(int32 page_id, const std::wstring& title) { + if (title.length() > chrome::kMaxTitleChars) { + NOTREACHED() << "Renderer sent too many characters in title."; + return; + } delegate_->UpdateTitle(this, page_id, title); } |