Clamp size of remote frame viewport intersection to frame bounds
When calculating the viewport intersection of an iframe, we walk up the LayoutObject hierarchy, mapping the iframe's bounds into the coordinate system of each of its ancestors. When we encounter an ancestor with a clip, we take the axis-aligned enclosing rect of the iframe bounds to calculate the clip, and continue with that. As a result, the final computed intersection rect can be *larger* than the initial rect. This patch clamps the size and location of the viewport intersection to the size of the iframe's contents. Change-Id: Ie78cd824d68509ede748a906cefad4d611642388 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2427187 Commit-Queue: Stefan Zager <szager@chromium.org> Reviewed-by:Ken Buchanan <kenrb@chromium.org> Cr-Commit-Position: refs/heads/master@{#811500}
Showing
Please register or sign in to comment