diff options
| author | mmenke <mmenke@chromium.org> | 2016-03-07 13:37:53 -0800 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2016-03-07 21:39:40 +0000 |
| commit | 50e411b47515eddff0c159979ba99a8a70c67897 (patch) | |
| tree | 7d881f79b378c1aa2cec9ddf19eda58f181da8f4 /extensions/browser/api | |
| parent | 6f344af54443c7e169e2b6969174f4d5986e3335 (diff) | |
| download | chromium_src-50e411b47515eddff0c159979ba99a8a70c67897.zip chromium_src-50e411b47515eddff0c159979ba99a8a70c67897.tar.gz chromium_src-50e411b47515eddff0c159979ba99a8a70c67897.tar.bz2 | |
Remove UnescapeRule::URL_SPECIAL_CHARS from chrome/ and extensions/
We're removing this, in favor of PATH_SEPARATORS and
URL_SPECIAL_CHARS_EXCEPT_PATH_SEPARATORS, to reduce the
risk of security issues when unescaping, going forward.
In most cases, this CL just replaces the old flag with both
of the new ones, though in bookmark_html_reader.cc, it now
uses just URL_SPECIAL_CHARS_EXCEPT_PATH_SEPARATORS.
BUG=589257
Review URL: https://codereview.chromium.org/1767453002
Cr-Commit-Position: refs/heads/master@{#379648}
Diffstat (limited to 'extensions/browser/api')
| -rw-r--r-- | extensions/browser/api/web_request/form_data_parser.cc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/extensions/browser/api/web_request/form_data_parser.cc b/extensions/browser/api/web_request/form_data_parser.cc index 0da2023..3d73e6d 100644 --- a/extensions/browser/api/web_request/form_data_parser.cc +++ b/extensions/browser/api/web_request/form_data_parser.cc @@ -352,7 +352,8 @@ scoped_ptr<FormDataParser> FormDataParser::CreateFromContentTypeHeader( FormDataParser::FormDataParser() {} const net::UnescapeRule::Type FormDataParserUrlEncoded::unescape_rules_ = - net::UnescapeRule::URL_SPECIAL_CHARS | + net::UnescapeRule::PATH_SEPARATORS | + net::UnescapeRule::URL_SPECIAL_CHARS_EXCEPT_PATH_SEPARATORS | net::UnescapeRule::SPOOFING_AND_CONTROL_CHARS | net::UnescapeRule::SPACES | net::UnescapeRule::REPLACE_PLUS_WITH_SPACE; |