[chrome.dial] Enforce SSDP device description host is the same IP as SSDP response |
|||
Issue descriptionThis would add a further defense against forcing requests to third parties.
,
Sep 27 2017
This should be done in the in-browser implementation, and we are going to obsolete and remove this API once Bug 718154 is fully launched.
,
Nov 7
It looks like this was not actually done in the in-browser DIAL implementation. I can do this as part of closing out Bug 749700 . |
|||
►
Sign in to add a comment |
|||
Comment 1 by sko...@chromium.org
, Jan 12 2017