diff options
author | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2018-01-29 11:33:43 +0100 |
---|---|---|
committer | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2018-02-02 10:38:49 +0000 |
commit | 1d1c8edbe6d76db52326f64cb35b173583bc8271 (patch) | |
tree | 17c7b3c33874e55263152f98e92c8a9454e429dd | |
parent | 2d07ab20669cfb33c08079c4661cf80cdcaa6f3e (diff) | |
download | qtwebengine-chromium-1d1c8edbe6d76db52326f64cb35b173583bc8271.tar.gz |
[Backport] Inherit referrer and policy when creating a nested browsing context
BUG=763194
R=estark@chromium.org
Reviewed-on: https://chromium-review.googlesource.com/732652
Reviewed-by: Emily Stark <estark@chromium.org>
Commit-Queue: Jochen Eisinger <jochen@chromium.org>
Cr-Commit-Position: refs/heads/master@{#511211}
(CVE-2018-6048)
Change-Id: Ia3ff201c9382a8cd71a937ad8434ce9838fc35f8
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
-rw-r--r-- | chromium/third_party/WebKit/Source/core/dom/Document.cpp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/chromium/third_party/WebKit/Source/core/dom/Document.cpp b/chromium/third_party/WebKit/Source/core/dom/Document.cpp index 871d1b10fc5..52a7731c55d 100644 --- a/chromium/third_party/WebKit/Source/core/dom/Document.cpp +++ b/chromium/third_party/WebKit/Source/core/dom/Document.cpp @@ -2839,6 +2839,7 @@ void Document::open(Document* entered_document, KURL new_url = entered_document->Url(); new_url.SetFragmentIdentifier(String()); SetURL(new_url); + SetReferrerPolicy(entered_document->GetReferrerPolicy()); } cookie_url_ = entered_document->CookieURL(); |