New issue
Advanced search Search tips

Issue 661277 link

Starred by 3 users
Status: Fixed
Owner:
iclell...@chromium.org
Closed: Mar 2017
Cc:
lfg@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac
Pri: 3
Type: Bug

Blocking:
issue 623682



Sign in to add a comment

Remove JS interface modification from Feature Policy code

Project Member Reported by iclell...@chromium.org, Nov 1 2016 
The initial implementation of Feature Policy contains code to remove JS interfaces document.write, document.writeln, document.cookie, and document.domain from frames which are not allowed to use those features.

This is very useful for testing, but is not being shipped as part of the MVP for Feature Policy. Support for this mechanism needs to be removed before shipping.

Comment 1 by kochi@chromium.org, Nov 4 2016 

@iclelland Could you fill "Components" field and avoid "Blink"?

Thanks!
(commenting as a part of my blink bug triage sheriff duty)

Comment 2 by iclell...@chromium.org, Nov 8 2016

Components: -Blink Blink>Bindings

Comment 3 by iclell...@chromium.org, Jan 3 2017

Components: Blink>FeaturePolicy

Comment 4 by iclell...@chromium.org, Mar 21 2017

Labels: Feature-Policy-V2
Fixed; those features are no longer referenced in the V1 code.

Comment 5 by iclell...@chromium.org, Mar 21 2017

Status: Fixed (was: Assigned)
►

Sign in to add a comment