New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 668227 link

Starred by 1 user
Status: Fixed
Owner:
eugene...@chromium.org
Closed: Nov 2016
Cc:
█ jyqu...@chromium.org
ios-bugs-priority@chromium.org
ios-bugs@chromium.org
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 1
Type: Bug



Sign in to add a comment

iframe can crash Chrome for iOS

Project Member Reported by eugene...@chromium.org, Nov 23 2016 
I frame can cause a CHECK by executing this script:
window.webkit.messageHandlers['crwebinvoke'].postMessage('kill')

POC: https://jsfiddle.net/7ekcw2fs/
Project Member

Comment 1 by bugdroid1@chromium.org, Nov 23 2016 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/517eda903af4bedf38b353141b185215dd3ea0d0

commit 517eda903af4bedf38b353141b185215dd3ea0d0
Author: eugenebut <eugenebut@chromium.org>
Date: Wed Nov 23 20:19:19 2016

[ios] Handle gracefully WK messages sent by iframes.

BUG= 668227 

Review-Url: https://codereview.chromium.org/2526833003
Cr-Commit-Position: refs/heads/master@{#434234}

[modify] https://crrev.com/517eda903af4bedf38b353141b185215dd3ea0d0/ios/web/web_state/ui/crw_web_controller.mm

Comment 2 by eugene...@chromium.org, Nov 23 2016

Status: Fixed (was: Started)
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 24 2016

Labels: -Restrict-View-SecurityTeam Restrict-View-SecurityNotify
Project Member

Comment 4 by sheriffbot@chromium.org, Mar 2 2017

Labels: -Restrict-View-SecurityNotify allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment