8000 chore: cherry-pick 27eb11a28555 from chromium by ppontes · Pull Request #32016 · electron/electron · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

chore: cherry-pick 27eb11a28555 from chromium #32016

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Jan 13, 2022

Conversation

ppontes
Copy link
Member
@ppontes ppontes commented Nov 27, 2021

Run CORS check for manual redirects

...to prevent status code leak.

Bug: 1251179
Change-Id: I7fcab0daf49e16305ed53702f42d1d1eacc933e5
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3193481
Reviewed-by: Yoav Weiss yoavweiss@chromium.org
Commit-Queue: Yutaka Hirano yhirano@chromium.org
Cr-Commit-Position: refs/heads/main@{#926166}

Notes: Backported fix for CVE-2021-38019.

@ppontes ppontes requested a review from a team as a code owner November 27, 2021 00:20
@ppontes ppontes added 14-x-y backport-check-skip Skip trop's backport validity checking semver/patch backwards-compatible bug fixes labels Nov 27, 2021
@electron-cation electron-cation bot added new-pr 🌱 PR opened recently and removed new-pr 🌱 PR opened recently labels Nov 27, 2021
@zcbenz zcbenz merged commit ec0b62e into 14-x-y Jan 13, 2022
@zcbenz zcbenz deleted the cherry-pick/14-x-y/chromium/27eb11a28555 branch January 13, 2022 00:36
@release-clerk
Copy link
release-clerk bot commented Jan 13, 2022

Release Notes Persisted

Backported fix for CVE-2021-38019.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
14-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants
0