• Yutaka Hirano's avatar
    [OOR-CORS] Support --allow-file-access-from-files · 6cf2a0a0
    Yutaka Hirano authored
    network::ResourceRequest::request_initiator is set based on
    blink::ResourceRequest::RequestorOrigin. The former is a url::Origin
    the latter is a scoped_refptr<const blink::SecurityOrigin>.
    
    A file: origin is handled in a special manner in blink. Without
    --allow-file-access-from-files, it is NOT opaque but it is serialized
    as "null". Currently conversion from blink::SecurityOrigin to
    url::Origin relies on opacity (i.e., blink::SecurityOrigin::IsOpaque)
    but that is not good for CORS.
    
    This CL changes that. With this CL, A SecurityOrigin serializes as
    "null" is converted to a unique url::Origin.
    
    Bug: 736308
    Cq-Include-Trybots: luci.chromium.try:linux_mojo
    Change-Id: I7b5ec4894c52499d85165689fd114e28bbd8bb97
    Reviewed-on: https://chromium-review.googlesource.com/1131021Reviewed-by: default avatarDaniel Cheng <dcheng@chromium.org>
    Reviewed-by: default avatarKinuko Yasuda <kinuko@chromium.org>
    Reviewed-by: default avatarTakashi Toyoshima <toyoshim@chromium.org>
    Commit-Queue: Yutaka Hirano <yhirano@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#594625}
    6cf2a0a0
web_url_loader_impl.cc 58 KB