[glic] Clarify sensitive list vs various blocklists [chromium/src : main]

0 views
Skip to first unread message

Chris Fredrickson (Gerrit)

unread,
Jan 9, 2026, 4:57:15 PM (5 days ago) Jan 9
to Dylan Cutler, Chromium LUCI CQ, chromium...@chromium.org, mfoltz+wa...@chromium.org
Attention needed from Dylan Cutler

Chris Fredrickson voted Commit-Queue+1

Commit-Queue+1
Open in Gerrit

Related details

Attention is currently required from:
  • Dylan Cutler
Submit Requirements:
  • requirement satisfiedCode-Coverage
  • requirement is not satisfiedCode-Owners
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedReview-Enforcement
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: chromium/src
Gerrit-Branch: main
Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
Gerrit-Change-Number: 7424590
Gerrit-PatchSet: 2
Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
Gerrit-Attention: Dylan Cutler <dylan...@google.com>
Gerrit-Comment-Date: Fri, 09 Jan 2026 21:57:10 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
satisfied_requirement
unsatisfied_requirement
open
diffy

Dylan Cutler (Gerrit)

unread,
Jan 9, 2026, 5:59:43 PM (5 days ago) Jan 9
to Chris Fredrickson, Chromium LUCI CQ, chromium...@chromium.org, mfoltz+wa...@chromium.org
Attention needed from Chris Fredrickson

Dylan Cutler added 1 comment

Patchset-level comments
File-level comment, Patchset 2 (Latest):
Dylan Cutler . unresolved

I appreciate the rename, originally this was supposed to be a blocklist when I wrote it so this update is needed.

That being said, I think replacing `Blocklist` with `Confirmlist` is a better rename. It conveys what action these sites require more clearly than "sensitive" which requires a further step of explanation. Furthermore, if we want to have sites be manually confirmed for other reasons then the name remains accurate :)

Open in Gerrit

Related details

Attention is currently required from:
  • Chris Fredrickson
Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
    Gerrit-Change-Number: 7424590
    Gerrit-PatchSet: 2
    Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
    Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
    Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
    Gerrit-Attention: Chris Fredrickson <cfre...@chromium.org>
    Gerrit-Comment-Date: Fri, 09 Jan 2026 22:59:36 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: No
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Chris Fredrickson (Gerrit)

    unread,
    Jan 9, 2026, 6:44:19 PM (5 days ago) Jan 9
    to Dylan Cutler, Chromium LUCI CQ, chromium...@chromium.org, mfoltz+wa...@chromium.org
    Attention needed from Dylan Cutler

    Chris Fredrickson added 1 comment

    Patchset-level comments
    Dylan Cutler . unresolved

    I appreciate the rename, originally this was supposed to be a blocklist when I wrote it so this update is needed.

    That being said, I think replacing `Blocklist` with `Confirmlist` is a better rename. It conveys what action these sites require more clearly than "sensitive" which requires a further step of explanation. Furthermore, if we want to have sites be manually confirmed for other reasons then the name remains accurate :)

    Chris Fredrickson

    Hm, I was under the impression that there wasn't necessarily a confirm dialog either? I.e. if kGlicPromptUserForSensitiveNavigations is disabled then the navigation is blocked. I would argue that that means "confirmlist" is misleading for the same reason that "blocklist" is, therefore.

    That's why I chose "sensitive", since that's really the semantic that's associated with those origins -- and it's up to the client's feature state to decide how to handle a sensitive origin. WDYT?

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Dylan Cutler
    Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
    Gerrit-Change-Number: 7424590
    Gerrit-PatchSet: 2
    Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
    Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
    Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
    Gerrit-Attention: Dylan Cutler <dylan...@google.com>
    Gerrit-Comment-Date: Fri, 09 Jan 2026 23:44:13 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: No
    Comment-In-Reply-To: Dylan Cutler <dylan...@google.com>
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Dylan Cutler (Gerrit)

    unread,
    11:49 AM (11 hours ago) 11:49 AM
    to Chris Fredrickson, Code Review Nudger, Chromium LUCI CQ, chromium...@chromium.org, mfoltz+wa...@chromium.org
    Attention needed from Chris Fredrickson

    Dylan Cutler voted and added 1 comment

    Votes added by Dylan Cutler

    Code-Review+1

    1 comment

    Patchset-level comments
    Dylan Cutler . resolved

    I appreciate the rename, originally this was supposed to be a blocklist when I wrote it so this update is needed.

    That being said, I think replacing `Blocklist` with `Confirmlist` is a better rename. It conveys what action these sites require more clearly than "sensitive" which requires a further step of explanation. Furthermore, if we want to have sites be manually confirmed for other reasons then the name remains accurate :)

    Chris Fredrickson

    Hm, I was under the impression that there wasn't necessarily a confirm dialog either? I.e. if kGlicPromptUserForSensitiveNavigations is disabled then the navigation is blocked. I would argue that that means "confirmlist" is misleading for the same reason that "blocklist" is, therefore.

    That's why I chose "sensitive", since that's really the semantic that's associated with those origins -- and it's up to the client's feature state to decide how to handle a sensitive origin. WDYT?

    Dylan Cutler

    Acknowledged

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Chris Fredrickson
    Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement is not satisfiedCode-Owners
      • requirement satisfiedCode-Review
      • requirement satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
      Gerrit-Change-Number: 7424590
      Gerrit-PatchSet: 2
      Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
      Gerrit-CC: Code Review Nudger <android-build...@prod.google.com>
      Gerrit-Attention: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Comment-Date: Wed, 14 Jan 2026 16:49:43 +0000
      Gerrit-HasComments: Yes
      Gerrit-Has-Labels: Yes
      Comment-In-Reply-To: Chris Fredrickson <cfre...@chromium.org>
      Comment-In-Reply-To: Dylan Cutler <dylan...@google.com>
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Chris Fredrickson (Gerrit)

      unread,
      5:09 PM (6 hours ago) 5:09 PM
      to Jeremy Roman, Dylan Cutler, Code Review Nudger, Chromium LUCI CQ, chromium...@chromium.org, mfoltz+wa...@chromium.org
      Attention needed from Jeremy Roman

      Chris Fredrickson voted Auto-Submit+1

      Auto-Submit+1
      Open in Gerrit

      Related details

      Attention is currently required from:
      • Jeremy Roman
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement is not satisfiedCode-Owners
      • requirement satisfiedCode-Review
      • requirement satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
      Gerrit-Change-Number: 7424590
      Gerrit-PatchSet: 2
      Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
      Gerrit-Reviewer: Jeremy Roman <jbr...@chromium.org>
      Gerrit-CC: Code Review Nudger <android-build...@prod.google.com>
      Gerrit-Attention: Jeremy Roman <jbr...@chromium.org>
      Gerrit-Comment-Date: Wed, 14 Jan 2026 22:09:35 +0000
      Gerrit-HasComments: No
      Gerrit-Has-Labels: Yes
      satisfied_requirement
      unsatisfied_requirement
      open
      diffy

      Jeremy Roman (Gerrit)

      unread,
      7:46 PM (3 hours ago) 7:46 PM
      to Chris Fredrickson, Jeremy Roman, Dylan Cutler, Code Review Nudger, Chromium LUCI CQ, chromium...@chromium.org, mfoltz+wa...@chromium.org
      Attention needed from Chris Fredrickson

      Jeremy Roman voted

      Code-Review+1
      Commit-Queue+2
      Open in Gerrit

      Related details

      Attention is currently required from:
      • Chris Fredrickson
      Submit Requirements:
      • requirement satisfiedCode-Coverage
      • requirement satisfiedCode-Owners
      • requirement satisfiedCode-Review
      • requirement satisfiedReview-Enforcement
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
      Gerrit-Change-Number: 7424590
      Gerrit-PatchSet: 2
      Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
      Gerrit-Reviewer: Jeremy Roman <jbr...@chromium.org>
      Gerrit-CC: Code Review Nudger <android-build...@prod.google.com>
      Gerrit-Attention: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Comment-Date: Thu, 15 Jan 2026 00:46:26 +0000
      Gerrit-HasComments: No
      Gerrit-Has-Labels: Yes
      satisfied_requirement
      open
      diffy

      Chromium LUCI CQ (Gerrit)

      unread,
      8:37 PM (3 hours ago) 8:37 PM
      to Chris Fredrickson, Jeremy Roman, Dylan Cutler, Code Review Nudger, chromium...@chromium.org, mfoltz+wa...@chromium.org

      Chromium LUCI CQ submitted the change

      Change information

      Commit message:
      [glic] Clarify sensitive list vs various blocklists

      ExecutionEngine currently supports multiple origin blocklists (global
      list via component updater; enterprise policy). It also supports a list
      of origins provided by OptimizationGuide for which navigation to those
      origins is considered "sensitive". Depending on feature flag
      configuration, navigation to sensitive origins may be either blocked
      outright, or may show a user confirmation dialog.

      This CL renames/rewords everything about the OptimizationGuide
      "blocklist"/"confirmlist" and calls it a "sensitive" list instead, since
      presence on the list doesn't guarantee the navigation will be blocked
      (or show a user confirmation, conversely).
      Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
      Auto-Submit: Chris Fredrickson <cfre...@chromium.org>
      Commit-Queue: Jeremy Roman <jbr...@chromium.org>
      Reviewed-by: Dylan Cutler <dylan...@google.com>
      Reviewed-by: Jeremy Roman <jbr...@chromium.org>
      Cr-Commit-Position: refs/heads/main@{#1569461}
      Files:
      • M chrome/browser/actor/execution_engine.cc
      • M chrome/browser/actor/execution_engine.h
      Change size: M
      Delta: 2 files changed, 40 insertions(+), 43 deletions(-)
      Branch: refs/heads/main
      Submit Requirements:
      • requirement satisfiedCode-Review: +1 by Jeremy Roman, +1 by Dylan Cutler
      Open in Gerrit
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: merged
      Gerrit-Project: chromium/src
      Gerrit-Branch: main
      Gerrit-Change-Id: I806582788cb08f49c96d22cb65bc21242d723d68
      Gerrit-Change-Number: 7424590
      Gerrit-PatchSet: 3
      Gerrit-Owner: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Chris Fredrickson <cfre...@chromium.org>
      Gerrit-Reviewer: Chromium LUCI CQ <chromiu...@luci-project-accounts.iam.gserviceaccount.com>
      Gerrit-Reviewer: Dylan Cutler <dylan...@google.com>
      Gerrit-Reviewer: Jeremy Roman <jbr...@chromium.org>
      open
      diffy
      satisfied_requirement
      Reply all
      Reply to author
      Forward
      0 new messages