Skip to content
Commit 4d2cab77 authored by Tomasz Wiszkowski's avatar Tomasz Wiszkowski Committed by Chromium LUCI CQ
Browse files

[M129] Disallow VerbatimMatches to open non-navigable URLs by default.

This change prevents non-navigable URLs from being opened upon paste,
refine, autocomplete etc., effectively disallowing accidental execution
of inline javascript: blocks.

The non-navigable (e.g. executable) URIs will be effectively pushed
down on the suggestions list, making them still available, but
moving forward these will require an explicit user action to be
invoked (i.e. the user now has to intentionally tap these suggestions
to initiate the corresponding action).

The change removes redundant test that relies on inline page
injection. This is already covered by another test:
http://shortn/_NG1M484b41

(cherry picked from commit 04938340)

Bug: b/360642942
Change-Id: I47abb15e38272355664ac8e2714b04a8dbef11e2
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5814284


Reviewed-by: default avatarGang Wu <gangwu@chromium.org>
Commit-Queue: Tomasz Wiszkowski <ender@google.com>
Cr-Original-Commit-Position: refs/heads/main@{#1347092}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5851277


Reviewed-by: default avatarKrishna Govind <govind@chromium.org>
Owners-Override: Krishna Govind <govind@chromium.org>
Commit-Queue: Krishna Govind <govind@chromium.org>
Cr-Commit-Position: refs/branch-heads/6668@{#1133}
Cr-Branched-From: 05bc6649-refs/heads/main@{#1343869}
parent 23dafba3
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment