Skip to content
Commit 04938340 authored by Tomasz Wiszkowski's avatar Tomasz Wiszkowski Committed by Chromium LUCI CQ
Browse files

Disallow VerbatimMatches to open non-navigable URLs by default.

This change prevents non-navigable URLs from being opened upon paste,
refine, autocomplete etc., effectively disallowing accidental execution
of inline javascript: blocks.

The non-navigable (e.g. executable) URIs will be effectively pushed
down on the suggestions list, making them still available, but
moving forward these will require an explicit user action to be
invoked (i.e. the user now has to intentionally tap these suggestions
to initiate the corresponding action).

The change removes redundant test that relies on inline page
injection. This is already covered by another test:
http://shortn/_NG1M484b41

Bug: b/360642942
Change-Id: I47abb15e38272355664ac8e2714b04a8dbef11e2
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5814284


Reviewed-by: default avatarGang Wu <gangwu@chromium.org>
Commit-Queue: Tomasz Wiszkowski <ender@google.com>
Cr-Commit-Position: refs/heads/main@{#1347092}
parent d3535027
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment