From 3d47abe5b6156a63bfe9267fb4cb01d0b3bbc031 Mon Sep 17 00:00:00 2001 From: "fsamuel@chromium.org" Date: Wed, 5 Jun 2013 18:57:50 +0000 Subject: executeScript should use instance ID Currently we trust the embedder to give the browser process the routing ID and process ID of the guest it would like to inject script into. This is potentially unsafe. We should instead use the guest instance ID and verify that the given embedder can access the guest with the given instance ID. BUG=246652 Review URL: https://chromiumcodereview.appspot.com/16361007 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@204311 0039d316-1c4b-4281-b951-d872f2087c98 --- content/common/browser_plugin/browser_plugin_constants.cc | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'content/common/browser_plugin/browser_plugin_constants.cc') diff --git a/content/common/browser_plugin/browser_plugin_constants.cc b/content/common/browser_plugin/browser_plugin_constants.cc index 84214fc5..2ecb072 100644 --- a/content/common/browser_plugin/browser_plugin_constants.cc +++ b/content/common/browser_plugin/browser_plugin_constants.cc @@ -14,8 +14,7 @@ const char kMethodCanGoBack[] = "canGoBack"; const char kMethodCanGoForward[] = "canGoForward"; const char kMethodForward[] = "forward"; const char kMethodGetInstanceId[] = "getInstanceId"; -const char kMethodGetProcessId[] = "getProcessId"; -const char kMethodGetRouteId[] = "getRouteId"; +const char kMethodGetGuestInstanceId[] = "getGuestInstanceId"; const char kMethodGo[] = "go"; const char kMethodReload[] = "reload"; const char kMethodStop[] = "stop"; -- cgit v1.1