Skip to content
This repository has been archived by the owner on Jan 4, 2019. It is now read-only.

Check resource type is javascript before calling AllowScriptFromSourceWithoutNotifying #627

Merged
merged 1 commit into from
Jul 2, 2018

Conversation

darkdh
Copy link
Member

@darkdh darkdh commented Jul 2, 2018

which will eventuall lead us to
ContentSettingsObserver::AllowScriptFromSource

https://chromium.googlesource.com/chromium/src/+/ea9b5b7daa1d3390b600f2efcaaa5ce3444bc244
It was safe before this commit because persistent client hint feature
wasn't enabled by default

fix brave/browser-laptop#14582

Auditors: @bridiver, @bbondy

`AllowScriptFromSourceWithoutNotifying` which will eventuall lead us to
`ContentSettingsObserver::AllowScriptFromSource`

https://chromium.googlesource.com/chromium/src/+/ea9b5b7daa1d3390b600f2efcaaa5ce3444bc244
It was safe before this commit because persistent client hint feature
wasn't enabled by default

fix brave/browser-laptop#14582

Auditors: @bridiver, @bbondy
@darkdh darkdh self-assigned this Jul 2, 2018
@darkdh darkdh requested review from bridiver and bbondy July 2, 2018 21:43
@darkdh darkdh merged commit decbaec into master Jul 2, 2018
darkdh added a commit to brave/brave-core that referenced this pull request Jul 3, 2018
out problem like brave/muon#627
which `ContentSettingsObserver::AllowScriptFromSource` informs us
all the resources not just scripts

Auditors: @bridiver, @bbondy
@bsclifton bsclifton deleted the block_script branch July 9, 2018 20:03
darkdh added a commit that referenced this pull request Jul 11, 2018
Check resource type is javascript before calling AllowScriptFromSourceWithoutNotifying
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CSS and font resources are shown in blocked scripts list in shields
2 participants