summaryrefslogtreecommitdiff
path: root/chromium/extensions/browser/url_request_util.cc
diff options
context:
space:
mode:
authorAllan Sandfeld Jensen <allan.jensen@qt.io>2020-10-12 14:27:29 +0200
committerAllan Sandfeld Jensen <allan.jensen@qt.io>2020-10-13 09:35:20 +0000
commitc30a6232df03e1efbd9f3b226777b07e087a1122 (patch)
treee992f45784689f373bcc38d1b79a239ebe17ee23 /chromium/extensions/browser/url_request_util.cc
parent7b5b123ac58f58ffde0f4f6e488bcd09aa4decd3 (diff)
downloadqtwebengine-chromium-85-based.tar.gz
BASELINE: Update Chromium to 85.0.4183.14085-based
Change-Id: Iaa42f4680837c57725b1344f108c0196741f6057 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Diffstat (limited to 'chromium/extensions/browser/url_request_util.cc')
-rw-r--r--chromium/extensions/browser/url_request_util.cc31
1 files changed, 12 insertions, 19 deletions
diff --git a/chromium/extensions/browser/url_request_util.cc b/chromium/extensions/browser/url_request_util.cc
index 897ef43f0d6..070f288467b 100644
--- a/chromium/extensions/browser/url_request_util.cc
+++ b/chromium/extensions/browser/url_request_util.cc
@@ -84,28 +84,21 @@ bool AllowCrossRendererResourceLoad(const GURL& url,
if (resource_type == blink::mojom::ResourceType::kMainFrame) {
*allowed = true;
return true;
- } else if (resource_type == blink::mojom::ResourceType::kSubFrame) {
- // When navigating in subframe, allow if it is the same origin
- // as the top-level frame. This can only be the case if the subframe
- // request is coming from the extension process.
- if (process_map.Contains(child_id)) {
- *allowed = true;
- return true;
- }
+ }
- // Also allow if the file is explicitly listed as a web_accessible_resource.
- if (WebAccessibleResourcesInfo::IsResourceWebAccessible(
- extension, resource_path.as_string())) {
- *allowed = true;
- return true;
- }
+ // When navigating in subframe, allow if it is the same origin
+ // as the top-level frame. This can only be the case if the subframe
+ // request is coming from the extension process.
+ if (resource_type == blink::mojom::ResourceType::kSubFrame &&
+ process_map.Contains(child_id)) {
+ *allowed = true;
+ return true;
}
- // Since not all subresources are required to be listed in a v2
- // manifest, we must allow all subresource loads if there are any web
- // accessible resources. See http://crbug.com/179127.
- if (!blink::IsResourceTypeFrame(resource_type) &&
- WebAccessibleResourcesInfo::HasWebAccessibleResources(extension)) {
+ // Allow web accessible extension resources to be loaded as
+ // subresources/sub-frames.
+ if (WebAccessibleResourcesInfo::IsResourceWebAccessible(
+ extension, resource_path.as_string())) {
*allowed = true;
return true;
}