Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick 2b978fb482 from chromium #32234

merged 1 commit into from Jan 4, 2022


Copy link

@ppontes ppontes commented Dec 17, 2021

M96: [FileAPI] Move origin checks in BlobURLStore sooner.

Rather than waiting to verify if a valid origin was passed in until
register/revoke time, check if the origin is valid at the time the
mojo interface is requested. This avoids the need to pass the
delegate on to BlobURLStoreImpl, further decoupling this from

(cherry picked from commit 15cfa2bed3ce9dcdd0a06d3cd3b8330e3591acdc)

Bug: 1262183
Change-Id: I4889685d03501158abfe4f87c647dc468d005f78
Commit-Queue: Marijn Kruisselbrink
Reviewed-by: Alex Moshchuk
Cr-Original-Commit-Position: refs/heads/main@{#940015}
Bot-Commit: Rubber Stamper
Cr-Commit-Position: refs/branch-heads/4664@{#1078}
Cr-Branched-From: 24dc4ee75e01a29d390d43c9c264372a169273a7-refs/heads/main@{#929512}

Notes: Backported fix for CVE-2021-4057.

@ppontes ppontes added security 🔒 semver/patch backwards-compatible bug fixes backport-check-skip Skip trop's backport validity checking 13-x-y labels Dec 17, 2021
@ppontes ppontes requested a review from a team as a code owner December 17, 2021 09:37
@ppontes ppontes force-pushed the cherry-pick/13-x-y/chromium/2b978fb482 branch from f9cd0b0 to b329c68 Compare December 20, 2021 11:33
@zcbenz zcbenz merged commit 316f0bc into 13-x-y Jan 4, 2022
@zcbenz zcbenz deleted the cherry-pick/13-x-y/chromium/2b978fb482 branch January 4, 2022 01:10
Copy link

release-clerk bot commented Jan 4, 2022

Release Notes Persisted

Backported fix for CVE-2021-4057.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
13-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
None yet

Successfully merging this pull request may close these issues.

None yet

3 participants