diff options
| author | fsamuel@chromium.org <fsamuel@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-06-05 18:57:50 +0000 |
|---|---|---|
| committer | fsamuel@chromium.org <fsamuel@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-06-05 18:57:50 +0000 |
| commit | 3d47abe5b6156a63bfe9267fb4cb01d0b3bbc031 (patch) | |
| tree | 6b6b86aad7d1b6c9bb55e8e0aaf6cda665987fe1 /content/common/browser_plugin/browser_plugin_constants.cc | |
| parent | 251020cd804157d1ff66a6e571e5f9ea980d981d (diff) | |
| download | chromium_src-3d47abe5b6156a63bfe9267fb4cb01d0b3bbc031.zip chromium_src-3d47abe5b6156a63bfe9267fb4cb01d0b3bbc031.tar.gz chromium_src-3d47abe5b6156a63bfe9267fb4cb01d0b3bbc031.tar.bz2 | |
<webview> executeScript should use instance ID
Currently we trust the embedder to give the browser process the routing ID and
process ID of the guest it would like to inject script into. This is potentially
unsafe. We should instead use the guest instance ID and verify that the given
embedder can access the guest with the given instance ID.
BUG=246652
Review URL: https://chromiumcodereview.appspot.com/16361007
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@204311 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'content/common/browser_plugin/browser_plugin_constants.cc')
| -rw-r--r-- | content/common/browser_plugin/browser_plugin_constants.cc | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/content/common/browser_plugin/browser_plugin_constants.cc b/content/common/browser_plugin/browser_plugin_constants.cc index 84214fc5..2ecb072 100644 --- a/content/common/browser_plugin/browser_plugin_constants.cc +++ b/content/common/browser_plugin/browser_plugin_constants.cc @@ -14,8 +14,7 @@ const char kMethodCanGoBack[] = "canGoBack"; const char kMethodCanGoForward[] = "canGoForward"; const char kMethodForward[] = "forward"; const char kMethodGetInstanceId[] = "getInstanceId"; -const char kMethodGetProcessId[] = "getProcessId"; -const char kMethodGetRouteId[] = "getRouteId"; +const char kMethodGetGuestInstanceId[] = "getGuestInstanceId"; const char kMethodGo[] = "go"; const char kMethodReload[] = "reload"; const char kMethodStop[] = "stop"; |