GitLab

We ensure the direct sockets API cannot be used to by-pass CORS, by
causing NotAllowedError failures when web apps attempt to open direct
socket connections on port 443.

Not yet implemented: We should issue CORS pre-flight checks, to see
if the connection attempt may be permissible.


Bug: 1119601
Change-Id: Ia2179ae41072b99eda2ad4d5a8bbf41ddba252ba
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2383373Reviewed-by: Glen Robertson <glenrob@chromium.org>
Commit-Queue: Eric Willigers <ericwilligers@chromium.org>
Cr-Commit-Position: refs/heads/master@{#802997}