afae5d8 - platform/external/chromium_org

commit: afae5d83d66c1d041a1fa433fbb087c5cc604b67
[log]
author: Mikhail Naganov <mnaganov@google.com>
Wed May 07 18:22:43 2014 +0100
committer: Bill Yi <byi@google.com>
Tue Jun 17 14:19:51 2014 -0700
tree: 76a5615dbf83d51dc13fe14c31a3841f53df8ba8
parent: 69db19fcd0d02befbc5d3bac2075be563f79b84f [diff]

Block access to java.lang.Object.getClass in injected Java objects

Prevents invocations of java.lang.Object.getClass from JavaScript code via an
injected Java object.

On an invocation attempt, logs an EventLog message, and sends a message to
WebChromeClient.onConsoleMessage callback.

Bug: 13694467
Change-Id: I9eab38aac48c6ae4ad49dd06c67c8ccf0af17ea7

content/browser/renderer_host/java/java_bound_object.cc[diff]
content/browser/renderer_host/java/java_bound_object.h[diff]
content/browser/renderer_host/java/java_bridge_dispatcher_host_manager.cc[diff]
content/browser/renderer_host/java/java_bridge_dispatcher_host_manager.h[diff]

4 files changed