Commits on Oct 5, 2017

1. Implemented: remove browsing context name on cross origin navigation …

   When updating the history after a cross-origin navigation, the HTML
   Standard says: "If the browsing context is a top-level browsing context,
   but not an auxiliary browsing context, then set the browsing context's
   name to the empty string."
   
   Currently we are not doing this which means there's potential
   information leak.
   
   Spec: https://html.spec.whatwg.org/multipage/browsers.html#resetBCName
   I2I: https://groups.google.com/a/chromium.org/d/msg/blink-dev/fhUIycdlINU/RLVEOKaNAwAJ
   Webkit change:  https://trac.webkit.org/changeset/209076/webkit
   
   Bug: crbug.com/706350
   Change-Id: I70cb3efcef06a3442ed4bf9ddd3733e24ccde19d
   Reviewed-on: https://chromium-review.googlesource.com/645309
   Commit-Queue: Andy Paicu <andypaicu@chromium.org>
   Reviewed-by: Mike West <mkwst@chromium.org>
   Cr-Commit-Position: refs/heads/master@{#506708}

   

   andypaicu authored and chromium-wpt-export-bot committed Oct 5, 2017
   Configuration menu

   • View commit details
   • Copy full SHA for 05eba5a
   • Browse repository at this point

   Copy the full SHA

   05eba5a View commit details

   Browse the repository at this point in the history