From 26412c5edd678c85d96f1152095ca504acf50ceb Mon Sep 17 00:00:00 2001
From: Domenic Denicola
Date: Wed, 27 Jan 2021 10:54:13 -0500
Subject: [PATCH] Disallow simple dialogs from different-origin domain iframes
Closes #5407.
---
source | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/source b/source
index 2e4439f25f9..29bb5ff1b53 100644
--- a/source
+++ b/source
@@ -93527,6 +93527,11 @@ function sendData(data) {
data-x="concept-document-window">associated Document
has the sandboxed
modals flag set, then return true.
+ If window's relevant settings object's origin and window's relevant
+ settings object's top-level origin are not same origin-domain,
+ then return true.
+
If window's relevant agent's event loop's termination nesting level is
nonzero, then optionally return true.
@@ -123225,6 +123230,7 @@ INSERT INTERFACES HERE
Cao Yipeng,
Carlos Amengual,
Carlos Gabriel Cardona,
+ Carlos Ibarra López,
Carlos Perelló Marín,
Carolyn MacLeod,
Casey Leask,