• Arthur Hemery's avatar
    [Security] Fix COOP behavior in insecure contexts. · 1b99e9ec
    Arthur Hemery authored
    COOP should be disregarded in insecure contexts. This was not done
    properly and only avoided storing the COOP value in the RenderFrameHost
    after using it to potentially do a BrowsingInstance swap. This patch
    fixes the issue by completely stripping the response of its COOP value
    in such cases.
    
    Also fixes CrossOriginOpenerPolicyBrowserTest to use an HTTPS server
    and add a test that verifies it does not work over HTTP.
    
    Bug: 922191
    Change-Id: I4eb31afe33bbee0da672d8179879ca8242668258
    Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2087917Reviewed-by: default avatarCamille Lamy <clamy@chromium.org>
    Commit-Queue: Arthur Hemery <ahemery@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#747285}
    1b99e9ec
cross_origin_opener_policy_browsertest.cc 11 KB