| commit | a9e2ed7bbd23fdcc778b26e029aed56b8c032553 | [log] [tgz] |
|---|---|---|
| author | Changwan Ryu <changwan@google.com> | Wed May 27 10:22:40 2020 -0700 |
| committer | Changwan Ryu <changwan@google.com> | Mon Jun 01 13:56:47 2020 -0700 |
| tree | 35b7888250f1ad583bd9c3bed70238ac9bfffc02 | |
| parent | 67be1e7ae75e47a85d26ac067d3bfb352004c8c3 [diff] |
webkit: add a note regarding FLAG_SECURE for default dialogs Child windows do not inherit FLAG_SECURE from parent windows, and therefore, the default dialogs for JS callbacks do not have this flag even when the app window has it. This CL adds a note warning about this behavior to mitigate the potential vulnerability. Bug: 120086187 Test: m -j offline-sdk-docs seems not broken Change-Id: I12f12befd1f303d26ebc866f4817f5184279caeb