dmurph: could you please expand on the impact of this so we can update the severity? You can take a look at the severity guidelines here: https://www.chromium.org/developers/severity-guidelines

Thanks!

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f

commit a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f
Author: dmurph <dmurph@chromium.org>
Date: Mon Aug 15 19:16:37 2016

[BlobStorage] Added back security policy for files in blobs

BUG= 634557 

Review-Url: https://codereview.chromium.org/2214293002
Cr-Commit-Position: refs/heads/master@{#412013}

[modify] https://crrev.com/a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f/content/browser/blob_storage/blob_dispatcher_host.cc
[modify] https://crrev.com/a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f/content/browser/blob_storage/blob_dispatcher_host.h
[modify] https://crrev.com/a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f/content/browser/blob_storage/blob_dispatcher_host_unittest.cc
[modify] https://crrev.com/a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f/content/browser/renderer_host/render_process_host_impl.cc

Since this is a security issue for file reading, we need a merge to beta and stable.

[Automated comment] Request affecting a post-stable build (M52), manual review required.

Your change meets the bar and is auto-approved for M53 (branch: 2785)

Please merge your change by today 5:00 PM PT so we can take it in for this week Beta release. Thank you.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/ba568f7a0d13e8e97bee0d98b860b1f04ea82396

commit ba568f7a0d13e8e97bee0d98b860b1f04ea82396
Author: Daniel Murphy <dmurph@chromium.org>
Date: Mon Aug 15 22:23:31 2016

[BlobStorage] Added back security policy for files in blobs

BUG= 634557 

Review-Url: https://codereview.chromium.org/2214293002
Cr-Commit-Position: refs/heads/master@{#412013}
(cherry picked from commit a85b6e5f4d01bf0593612d0552d0c7a1ad7bc87f)

Review URL: https://codereview.chromium.org/2245273002 .

Cr-Commit-Position: refs/branch-heads/2785@{#612}
Cr-Branched-From: 68623971be0cfc492a2cb0427d7f478e7b214c24-refs/heads/master@{#403382}

[modify] https://crrev.com/ba568f7a0d13e8e97bee0d98b860b1f04ea82396/content/browser/blob_storage/blob_dispatcher_host.cc
[modify] https://crrev.com/ba568f7a0d13e8e97bee0d98b860b1f04ea82396/content/browser/blob_storage/blob_dispatcher_host.h
[modify] https://crrev.com/ba568f7a0d13e8e97bee0d98b860b1f04ea82396/content/browser/blob_storage/blob_dispatcher_host_unittest.cc
[modify] https://crrev.com/ba568f7a0d13e8e97bee0d98b860b1f04ea82396/content/browser/renderer_host/render_process_host_impl.cc

Please mark security bugs as fixed as soon as the fix lands, and before requesting merges. This update is based on the merge- labels applied to this issue. Please reopen if this update was incorrect.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

+awhalley as FYI.

No more M52 releases planned AFAIK and this is only a security severity medium, so I'm rejecting the merge; holler if you have any concerns.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot