New issue
Advanced search Search tips

Issue 831812 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug

Blocking:
issue 829412



Sign in to add a comment

sync-confirmation Web UI makes direct network requests

Project Member Reported by roc...@chromium.org, Apr 11 2018

Issue description

We would like to disallow network subresource requests from WebUI. WebUI pages should use <webview> instead so that network access is isolated to less privileged renderers.
 

Comment 1 by mastiz@chromium.org, Apr 12 2018

Components: -Services>Sync UI>Browser>WebUI

Sign in to add a comment