New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 795723 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Email to this user bounced
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac
Pri: 3
Type: Bug



Sign in to add a comment

Check the sensor FP in the browser process

Project Member Reported by mikhail....@intel.com, Dec 18 2017

Issue description

The sensor policy-controlled features should be checked in the browser process, in order to improve security robustness.
 

Comment 1 by raymes@chromium.org, Dec 19 2017

Components: Internals>Sandbox>SiteIsolation

Comment 2 by cco3@chromium.org, Jan 3 2018

Status: Available (was: Untriaged)
Status: Started (was: Available)
Project Member

Comment 4 by bugdroid1@chromium.org, Jan 25 2018

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/ff0799d2f65c78efd3e0bd8f642b3b79ad04f86c

commit ff0799d2f65c78efd3e0bd8f642b3b79ad04f86c
Author: Mikhail Pozdnyakov <mikhail.pozdnyakov@intel.com>
Date: Thu Jan 25 12:45:40 2018

[Sensors][DeviceOrientation]Browser-side Feature Policy check

The sensor policy-controlled features should be
checked in the browser process, in order to improve
security robustness.

This patch introduces browser-side feature policy check
for both the Generic Sensor and the Device Orientation APIs.

Bug:  796894 
Bug:  795723 
Change-Id: Idc9869d75bca70f3f9ee915101195c7cbee22587
Reviewed-on: https://chromium-review.googlesource.com/850699
Commit-Queue: Mikhail Pozdnyakov <mikhail.pozdnyakov@intel.com>
Reviewed-by: Tim Volodine <timvolodine@chromium.org>
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Reviewed-by: Jun Cai <juncai@chromium.org>
Reviewed-by: Alexander Shalamov <alexander.shalamov@intel.com>
Cr-Commit-Position: refs/heads/master@{#531874}
[modify] https://crrev.com/ff0799d2f65c78efd3e0bd8f642b3b79ad04f86c/content/browser/device_sensors/device_sensor_browsertest.cc
[modify] https://crrev.com/ff0799d2f65c78efd3e0bd8f642b3b79ad04f86c/content/browser/generic_sensor/sensor_provider_proxy_impl.cc
[modify] https://crrev.com/ff0799d2f65c78efd3e0bd8f642b3b79ad04f86c/content/browser/generic_sensor/sensor_provider_proxy_impl.h

Status: Verified (was: Started)

Sign in to add a comment