Whitelist interfaces exposed to child processes using capability spec |
|
Issue descriptionCurrently we are permitting all interfaces exposed by exe:content_browser to be bound by a renderer. Instead we should use manifest capability specs to tighten this to those specifically allowed by a "web" class. |
|
►
Sign in to add a comment |
|
Comment 1 by ben@chromium.org
, Sep 30 2016