Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home for chromium.org
« Groups Home
Message from discussion Prevent webview tags from navigating outside web-safe schemes. (issue 11313018)

Received: by 10.224.219.144 with SMTP id hu16mr2461268qab.1.1351302367939;
        Fri, 26 Oct 2012 18:46:07 -0700 (PDT)
X-BeenThere: chromium-revi...@chromium.org
Received: by 10.224.201.194 with SMTP id fb2ls6127638qab.3.gmail; Fri, 26 Oct
 2012 18:46:06 -0700 (PDT)
Received: by 10.224.111.78 with SMTP id r14mr13021798qap.31.1351302366383;
        Fri, 26 Oct 2012 18:46:06 -0700 (PDT)
Received: by 10.224.111.78 with SMTP id r14mr13021796qap.31.1351302366369;
        Fri, 26 Oct 2012 18:46:06 -0700 (PDT)
Return-Path: <33TyLUBUJAA4qv520w80q2rs5s9wsA-v5u0owz....@2uix4h7xygsz66weerlq.apphosting.bounces.google.com>
Received: from mail-qa0-f71.google.com (mail-qa0-f71.google.com [209.85.216.71])
        by mx.google.com with ESMTPS id dl3si2673343qab.3.2012.10.26.18.46.05
        (version=TLSv1/SSLv3 cipher=OTHER);
        Fri, 26 Oct 2012 18:46:05 -0700 (PDT)
Received-SPF: pass (google.com: domain of 33TyLUBUJAA4qv520w80q2rs5s9wsA-v5u0owz....@2uix4h7xygsz66weerlq.apphosting.bounces.google.com designates 209.85.216.71 as permitted sender) client-ip=209.85.216.71;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of 33TyLUBUJAA4qv520w80q2rs5s9wsA-v5u0owz....@2uix4h7xygsz66weerlq.apphosting.bounces.google.com designates 209.85.216.71 as permitted sender) smtp.mail=33TyLUBUJAA4qv520w80q2rs5s9wsA-v5u0owz....@2uix4h7xygsz66weerlq.apphosting.bounces.google.com; dkim=pass header...@chromium.org
Received: by mail-qa0-f71.google.com with SMTP id z32so1945608qad.6
        for <chromium-revi...@chromium.org>; Fri, 26 Oct 2012 18:46:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=chromium.org; s=google;
        h=mime-version:reply-to:x-google-appengine-app-id:message-id:date
         :subject:from:to:cc:content-type;
        bh=WRQ6UiOQPDfpDB9qHDNNcxXqChswJ0RBzj00CB6S+Ug=;
        b=em7syeLMo+fAvMEX0FaoXQWs4yzzPpF+WNr+0PXJguGH62DGBTq1J8JIHUatQy3Z9L
         sruKt1dEyJFJpNw/ZpUsxI2S9MfMUHp/+kdj+4+bfxA3i3RqpNoBNxWeImskq5k9wzG0
         VSPEfKIpC8PW8efanL11h+i/wKCHv5Ke+u7iY=
MIME-Version: 1.0
Received: by 10.58.225.134 with SMTP id rk6mr3990188vec.40.1351302365214; Fri,
 26 Oct 2012 18:46:05 -0700 (PDT)
Reply-To: cr...@chromium.org, tse...@chromium.org, fsam...@chromium.org, 
	willc...@chromium.org, chromium-revi...@chromium.org, 
	joi+watch-cont...@chromium.org, darin...@chromium.org, j...@chromium.org
Message-ID: <047d7b86c52e76783304cd009...@google.com>
Date: Sat, 27 Oct 2012 01:46:05 +0000
Subject: Re: Prevent webview tags from navigating outside web-safe schemes.
 (issue 11313018)
From: cr...@chromium.org
To: tse...@chromium.org, fsam...@chromium.org, willc...@chromium.org
Cc: chromium-revi...@chromium.org, joi+watch-cont...@chromium.org, 
	darin...@chromium.org, j...@chromium.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes

Also adding Will Chan for profile_impl_io_data.cc.  (I was able to skip the
Interceptor stuff since skipping the coarse-grained ProtocolHandlers was  
what I
was looking for.)

https://codereview.chromium.org/11313018/