[M129] Disallow VerbatimMatches to open non-navigable URLs by default.
This change prevents non-navigable URLs from being opened upon paste, refine, autocomplete etc., effectively disallowing accidental execution of inline javascript: blocks. The non-navigable (e.g. executable) URIs will be effectively pushed down on the suggestions list, making them still available, but moving forward these will require an explicit user action to be invoked (i.e. the user now has to intentionally tap these suggestions to initiate the corresponding action). The change removes redundant test that relies on inline page injection. This is already covered by another test: http://shortn/_NG1M484b41 (cherry picked from commit 04938340) Bug: b/360642942 Change-Id: I47abb15e38272355664ac8e2714b04a8dbef11e2 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5814284 Reviewed-by:Gang Wu <gangwu@chromium.org> Commit-Queue: Tomasz Wiszkowski <ender@google.com> Cr-Original-Commit-Position: refs/heads/main@{#1347092} Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5851277 Reviewed-by:
Krishna Govind <govind@chromium.org> Owners-Override: Krishna Govind <govind@chromium.org> Commit-Queue: Krishna Govind <govind@chromium.org> Cr-Commit-Position: refs/branch-heads/6668@{#1133} Cr-Branched-From: 05bc6649-refs/heads/main@{#1343869}
Loading
Please register or sign in to comment