summaryrefslogtreecommitdiffstats
path: root/components
diff options
context:
space:
mode:
authorjww@chromium.org <jww@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2013-11-22 01:20:02 +0000
committerjww@chromium.org <jww@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2013-11-22 01:20:02 +0000
commitf09047abed794f27703253a6ecc98673a6ce5363 (patch)
tree7ba28debff52de5f9de54660da37a0c2da5cb2e5 /components
parent8a5610641873c139760a68ab3bd05e20e62df3ae (diff)
downloadchromium_src-f09047abed794f27703253a6ecc98673a6ce5363.zip
chromium_src-f09047abed794f27703253a6ecc98673a6ce5363.tar.gz
chromium_src-f09047abed794f27703253a6ecc98673a6ce5363.tar.bz2
Don't autofill passwords or forms in iframed content.
BUG=257156 Review URL: https://codereview.chromium.org/73443002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@236661 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'components')
-rw-r--r--components/autofill/content/renderer/password_autofill_agent.cc5
1 files changed, 5 insertions, 0 deletions
diff --git a/components/autofill/content/renderer/password_autofill_agent.cc b/components/autofill/content/renderer/password_autofill_agent.cc
index 2791752..b6f903e 100644
--- a/components/autofill/content/renderer/password_autofill_agent.cc
+++ b/components/autofill/content/renderer/password_autofill_agent.cc
@@ -624,6 +624,11 @@ void PasswordAutofillAgent::FillFormOnPasswordRecieved(
const PasswordFormFillData& fill_data,
blink::WebInputElement username_element,
blink::WebInputElement password_element) {
+ // Do not fill if the password field is in an iframe.
+ DCHECK(password_element.document().frame());
+ if (password_element.document().frame()->parent())
+ return;
+
if (!username_element.form().autoComplete())
return;