From 6ef3fec596586e51d5b6831f486df804253b356c Mon Sep 17 00:00:00 2001 From: Carmelo Messina Date: Mon, 5 Jun 2023 20:35:57 +0200 Subject: [PATCH] Disallow Android App Scheme as referrer --- ...allow-Android-App-Scheme-as-referrer.patch | 25 +++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 build/patches/00Disallow-Android-App-Scheme-as-referrer.patch diff --git a/build/patches/00Disallow-Android-App-Scheme-as-referrer.patch b/build/patches/00Disallow-Android-App-Scheme-as-referrer.patch new file mode 100644 index 00000000..9f9a6e4b --- /dev/null +++ b/build/patches/00Disallow-Android-App-Scheme-as-referrer.patch @@ -0,0 +1,25 @@ +From: uazo +Date: Sat, 3 Jun 2023 15:09:26 +0000 +Subject: Disallow Android App Scheme as referrer + +--- + chrome/renderer/chrome_content_renderer_client.cc | 5 ----- + 1 file changed, 5 deletions(-) + +diff --git a/chrome/renderer/chrome_content_renderer_client.cc b/chrome/renderer/chrome_content_renderer_client.cc +--- a/chrome/renderer/chrome_content_renderer_client.cc ++++ b/chrome/renderer/chrome_content_renderer_client.cc +@@ -524,11 +524,6 @@ void ChromeContentRendererClient::RenderThreadStarted() { + // TODO(nyquist): Add test to ensure this happens when the flag is set. + WebSecurityPolicy::RegisterURLSchemeAsDisplayIsolated(dom_distiller_scheme); + +-#if BUILDFLAG(IS_ANDROID) +- WebSecurityPolicy::RegisterURLSchemeAsAllowedForReferrer( +- WebString::FromUTF8(content::kAndroidAppScheme)); +-#endif +- + // chrome-search: pages should not be accessible by bookmarklets + // or javascript: URLs typed in the omnibox. + WebSecurityPolicy::RegisterURLSchemeAsNotAllowingJavascriptURLs( +-- +2.25.1