Prevent permission state leakage in opaque origins [chromium/src : main]

[Jochen Eisinger (Gerrit)]

Attention needed from Balazs Engedy

Jochen Eisinger added 1 comment

Patchset-level comments

File-level comment, Patchset 10 (Latest):

Jochen Eisinger . resolved

ptal

The change seems straight forward enough, even though it touches a lot of files. The biggest delta is that cross-origin iframes in IWAs are by definition opaque and so can't get any permissions.

Open in Gerrit

Related details

Attention is currently required from:

• Balazs Engedy

Submit Requirements:

• Code-Coverage
• Code-Owners
• Code-Review
• Review-Enforcement

Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings.

Gerrit

Gerrit-MessageType: comment

Gerrit-Project: chromium/src

Gerrit-Branch: main

Gerrit-Change-Id: I6d6b44af0639dc1851c5c5e4f59b37a85e72df37

Gerrit-Change-Number: 8063935

Gerrit-PatchSet: 10

Gerrit-Owner: Jochen Eisinger <joc...@chromium.org>

Gerrit-Reviewer: Balazs Engedy <eng...@chromium.org>

Gerrit-Reviewer: Jochen Eisinger <joc...@chromium.org>

Gerrit-CC: Chromium LUCI CQ <chromiu...@luci-project-accounts.iam.gserviceaccount.com>

Gerrit-CC: Lin, Wanming <wanmi...@intel.com>

Gerrit-CC: Permissions Reviews <permissio...@chromium.org>

Gerrit-CC: Peter Beverloo <pe...@chromium.org>

Gerrit-CC: Raphael Kubo da Costa <ku...@igalia.com>

Gerrit-CC: Rijubrata Bhaumik <rijubrat...@intel.com>

Gerrit-CC: android-bu...@system.gserviceaccount.com <android-bu...@system.gserviceaccount.com>

Gerrit-CC: chromium...@chromium.org

Gerrit-Attention: Balazs Engedy <eng...@chromium.org>

Gerrit-Comment-Date: Fri, 10 Jul 2026 09:53:22 +0000

Gerrit-HasComments: Yes

Gerrit-Has-Labels: No