summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAllan Sandfeld Jensen <allan.jensen@qt.io>2018-01-29 11:33:43 +0100
committerAllan Sandfeld Jensen <allan.jensen@qt.io>2018-02-02 10:38:49 +0000
commit1d1c8edbe6d76db52326f64cb35b173583bc8271 (patch)
tree17c7b3c33874e55263152f98e92c8a9454e429dd
parent2d07ab20669cfb33c08079c4661cf80cdcaa6f3e (diff)
downloadqtwebengine-chromium-1d1c8edbe6d76db52326f64cb35b173583bc8271.tar.gz
[Backport] Inherit referrer and policy when creating a nested browsing context
BUG=763194 R=estark@chromium.org Reviewed-on: https://chromium-review.googlesource.com/732652 Reviewed-by: Emily Stark <estark@chromium.org> Commit-Queue: Jochen Eisinger <jochen@chromium.org> Cr-Commit-Position: refs/heads/master@{#511211} (CVE-2018-6048) Change-Id: Ia3ff201c9382a8cd71a937ad8434ce9838fc35f8 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
-rw-r--r--chromium/third_party/WebKit/Source/core/dom/Document.cpp1
1 files changed, 1 insertions, 0 deletions
diff --git a/chromium/third_party/WebKit/Source/core/dom/Document.cpp b/chromium/third_party/WebKit/Source/core/dom/Document.cpp
index 871d1b10fc5..52a7731c55d 100644
--- a/chromium/third_party/WebKit/Source/core/dom/Document.cpp
+++ b/chromium/third_party/WebKit/Source/core/dom/Document.cpp
@@ -2839,6 +2839,7 @@ void Document::open(Document* entered_document,
KURL new_url = entered_document->Url();
new_url.SetFragmentIdentifier(String());
SetURL(new_url);
+ SetReferrerPolicy(entered_document->GetReferrerPolicy());
}
cookie_url_ = entered_document->CookieURL();