Commit e3c8bfeb authored by Scott Violet's avatar Scott Violet Committed by Chromium LUCI CQ

wl/wl: add checks for IsInactiveAndDisallowReactivation()

This generally should only happen if the renderer is compromised.

BUG=none
TEST=none

Change-Id: I88d522e1e5f3f557c7f976541b6dc50fb0cfed81
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2631296Reviewed-by: default avatarShimi Zhang <ctzsm@chromium.org>
Commit-Queue: Scott Violet <sky@chromium.org>
Cr-Commit-Position: refs/heads/master@{#844116}
parent e13d931c
......@@ -72,6 +72,10 @@ void JsToBrowserMessaging::PostMessage(
std::vector<blink::MessagePortDescriptor> ports) {
DCHECK(render_frame_host_);
// This generally shouldn't happen, and may indicate a compromised renderer.
if (render_frame_host_->IsInactiveAndDisallowReactivation())
return;
content::WebContents* web_contents =
content::WebContents::FromRenderFrameHost(render_frame_host_);
......@@ -119,6 +123,10 @@ void JsToBrowserMessaging::PostMessage(
void JsToBrowserMessaging::SetBrowserToJsMessaging(
mojo::PendingAssociatedRemote<mojom::BrowserToJsMessaging>
java_to_js_messaging) {
// This generally shouldn't happen, and may indicate a compromised renderer.
if (render_frame_host_->IsInactiveAndDisallowReactivation())
return;
// A RenderFrame may inject JsToBrowserMessaging in the JavaScript context
// more than once because of reusing of RenderFrame.
host_.reset();
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment