| Commit-Queue | +1 |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Hi Lily! Can you take a general look at this before I send to all the respective owners?
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
top_frame_origin.scheme() == content::kChromeUIUntrustedScheme &&
top_frame_origin.host() == chrome::kChromeUILensHost) {We should check the whole origin, not just scheme and host. In theory top_frame_origin could be something cursed like chrome-untrusted://lens:8880 and that shouldn't return true here. Could we instead make a GURL out of the Lens URL and then convert that to an origin to check against top_frame_origin? (same below)
url::Origin::Create(create_loader_params_->request
.site_for_cookies.RepresentativeUrl()),nit: use request.isolation_info.top_frame_origin instead
url::Origin::Create(request.site_for_cookies.RepresentativeUrl()),ditto
// Reset the SiteForCookies if the top frame origin is of a scheme that shouldnit: update comment
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
top_frame_origin.scheme() == content::kChromeUIUntrustedScheme &&
top_frame_origin.host() == chrome::kChromeUILensHost) {We should check the whole origin, not just scheme and host. In theory top_frame_origin could be something cursed like chrome-untrusted://lens:8880 and that shouldn't return true here. Could we instead make a GURL out of the Lens URL and then convert that to an origin to check against top_frame_origin? (same below)
Done
url::Origin::Create(create_loader_params_->request
.site_for_cookies.RepresentativeUrl()),Duncan Mercernit: use request.isolation_info.top_frame_origin instead
Done
url::Origin::Create(request.site_for_cookies.RepresentativeUrl()),Duncan Mercerditto
Done
// Reset the SiteForCookies if the top frame origin is of a scheme that shouldDuncan Mercernit: update comment
Done
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Unresolved comment to my self to re-verify the changes work before submitting.
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Unresolved comment to my self to re-verify the changes work before submitting.
Done
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Adding relevant file owners. Lily already took an overall review, so please review the files you have owners in.
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
[Lens / Cookies] Grant secure cookie exemptions for Lens side panel
This change grants a temporary secure cookie exemption for the Lens untrusted side panel (chrome-untrusted://lens) to use SameSite cookies. It updates ContentBrowserClient to support origin-based first-party cookie checks and registers the Lens origin in ProfileNetworkContextService and ChromeContentRendererClient.
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |