Skip to content

Commit

Permalink
[Backport] Security bug 1428743
Browse files Browse the repository at this point in the history
Cherry-pick of patch originally reviewed on
https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4386962:
Do not allow devtools extensions to inspect the new tab page.

Bug: 1428743
Change-Id: I1f9aff0b249515ca40f37ab68aa12a6f29e5c1b9
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4386962
Reviewed-by: Andrey Kosyakov <caseq@chromium.org>
Auto-Submit: Danil Somsikov <dsv@chromium.org>
Commit-Queue: Danil Somsikov <dsv@chromium.org>
Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/486077
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
  • Loading branch information
danilsomsikov authored and mibrunin committed Jun 20, 2023
1 parent 583acf0 commit fd7386d
Showing 1 changed file with 1 addition and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -65,10 +65,7 @@ declare global {
}
}

const kAllowedOrigins = [
'chrome://newtab',
'chrome://new-tab-page',
].map(url => (new URL(url)).origin);
const kAllowedOrigins = [].map(url => (new URL(url)).origin);

let extensionServerInstance: ExtensionServer|null;

Expand Down

0 comments on commit fd7386d

Please sign in to comment.