diff options
| author | horo <horo@chromium.org> | 2014-09-30 03:09:19 -0700 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2014-09-30 10:09:33 +0000 |
| commit | 69354ff099fcff76361bc74c1abe41b6f45de188 (patch) | |
| tree | 65104c6b36dddc8e25fe9f598fc599f67fff53d9 /pdf/number_image_generator.cc | |
| parent | b0e6f3fce92c7e2cc3df4a1d10d5508a48d1febc (diff) | |
| download | chromium_src-69354ff099fcff76361bc74c1abe41b6f45de188.zip chromium_src-69354ff099fcff76361bc74c1abe41b6f45de188.tar.gz chromium_src-69354ff099fcff76361bc74c1abe41b6f45de188.tar.bz2 | |
[ServiceWorker] Set setSkipServiceWorker flag of the request from plugins with private permission.
The plugins with private permission such as Flash plugin can bypass same origin checking by calling URLLoaderResource::GrantUniversalAccess().
They have their own origin checking logic (ex:cross-origin.xml).
If ServiceWorker can intercept the HTTP requests from them, they can be misled.
So ServiceWorker must be disabled for such plugins.
These plugins have PERMISSION_PRIVATE permissions.
- PDF Viewer
- Google Talk Plugin Video Renderer
- Google Talk Effects Plugin
- Google Talk Plugin
- Chrome Remote Desktop Viewer
- Pepper Flash
- Widevine Cdm Plugin
BUG=413094
Review URL: https://codereview.chromium.org/606993002
Cr-Commit-Position: refs/heads/master@{#297396}
Diffstat (limited to 'pdf/number_image_generator.cc')
0 files changed, 0 insertions, 0 deletions