New issue
Advanced search Search tips

Issue 854655 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android , Windows
Pri: 1
Type: Bug
Proj-XR



Sign in to add a comment

Do permission checks in the browser process before calling out to devices.

Project Member Reported by billorr@chromium.org, Jun 20 2018

Issue description

Currently XRDeviceRuntimeSessionOptions has render_process_id and render_frame_id, which are used to associate a requestSession call with a render frame.

This information shouldn't pass through the untrusted vr device process.
 
Components: Internals>XR
Labels: VR-Desktop
Labels: -Pri-3 Pri-1
Labels: -VR-Desktop
Removing Internals>VR component and assigning to Internals>XR
Components: -Internals>VR

Sign in to add a comment