diff options
Diffstat (limited to 'content/browser/renderer_host/media/audio_renderer_host.cc')
| -rw-r--r-- | content/browser/renderer_host/media/audio_renderer_host.cc | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/content/browser/renderer_host/media/audio_renderer_host.cc b/content/browser/renderer_host/media/audio_renderer_host.cc index 5ef8d43..ca96329 100644 --- a/content/browser/renderer_host/media/audio_renderer_host.cc +++ b/content/browser/renderer_host/media/audio_renderer_host.cc @@ -761,7 +761,10 @@ void AudioRendererHost::CheckOutputDeviceAccess( const OutputDeviceAccessCB& callback) { DCHECK_CURRENTLY_ON(BrowserThread::IO); - if (!ChildProcessSecurityPolicyImpl::GetInstance()->CanRequestURL( + // Check security origin if nondefault device is requested. + // Ignore check for default device, which is always authorized. + if (!IsDefaultDeviceId(device_id) && + !ChildProcessSecurityPolicyImpl::GetInstance()->CanRequestURL( render_process_id_, gurl_security_origin)) { content::bad_message::ReceivedBadMessage(this, bad_message::ARH_UNAUTHORIZED_URL); |