New issue
Advanced search Search tips

Issue 792135 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac
Pri: 3
Type: Bug
Team-Security-UX

Blocking:
issue 448486



Sign in to add a comment

Check that committed interstitials work with Javascript/images/etc. disabled

Project Member Reported by est...@chromium.org, Dec 5 2017

Issue description

Error pages (including committed interstitials) shouldn't be subject to content setting rules like blocking JS. It seems likely that this works properly already, because otherwise error pages would be broken when you have content settings adjusted, but we should double-check to be sure. There is a special code path for making sure content settings don't affect interstitial overlays (https://cs.chromium.org/chromium/src/chrome/renderer/content_settings_observer.cc?l=321), so we'll need to either adjust that to work with committed interstitials, or remove it if it's redundant.

(see https://bugs.chromium.org/p/chromium/issues/detail?id=322948 for history)
 
Blocking: 448486
Cc: est...@chromium.org
Owner: carlosil@chromium.org
Assigning this one to myself since it's related to the JS bindings.
Tested this one by hand and it seems committed interstitials do work with images/JS disabled so that line can be removed once committed interstitials are the only codepath. Do you think it would be worth it to add a test that checks it still works with JS disabled?
Status: Fixed (was: Assigned)
Re #3: https://cs.chromium.org/chromium/src/chrome/browser/ssl/ssl_browsertest.cc?q=ssl_browsertest&sq=package:chromium&dr&l=4069 purports to test this situation already, so if that test is passing and you tested manually, I think we can just mark this as Fixed. Thanks!

Sign in to add a comment