Don't enforce XSDB when running with --disable-web-security |
||
Issue descriptionWhen running with --disable-web-security, it seems logical to skip XSDB checks, similarly to how SOP and other enforcement checks (e.g., CanCommitOrigin) are skipped in that mode. Lukasz mentioned that he can take care of this.
,
Jan 4 2018
From creis@ [1]: I think we might not want to do this. We use --disable-web-security to simulate renderer exploits in security tests, to make sure the browser process enforcements still work. [1] https://chromium-review.googlesource.com/c/chromium/src/+/850585#message-07d97d920e1535f92bc888b30a279b11f2dfca8a |
||
►
Sign in to add a comment |
||
Comment 1 by lukasza@chromium.org
, Jan 4 2018