mirror of
https://github.com/HeyPuter/firefox.git
synced 2026-11-13 20:14:57 -10:00
Divyansh Mangal
af18865252
Automatic update from web-platform-tests [SVG] Enforce blob URL noopener on SVG <a> navigations `SVGAElement::DefaultEventHandler` was missing the cross-partition blob URL noopener enforcement that `HTMLAnchorElementBase` and `LocalDOMWindow::open` already implement via `EnforceNoopenerOnBlobURLNavigation`. This allowed an SVG <a> element in a third-party iframe to open a same-origin blob: URL in a new window while retaining window.opener, bypassing storage partitioning. In this CL we extract the blob URL site-mismatch check into a shared utility and call it for both HTML <a> and SVG <a> elements. Bug: 502505715 Change-Id: Ic793f65456768bd93c32fc334164c468ffd8d63a Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7875805 Reviewed-by: Kent Tamura <[email protected]> Reviewed-by: Vinay Singh <[email protected]> Reviewed-by: Virali Purbey <[email protected]> Commit-Queue: Divyansh Mangal <[email protected]> Cr-Commit-Position: refs/heads/main@{#1641494} -- wpt-commits: 7767e0e06aed111cc0cf0dd5f7a7962c941b1d6c wpt-pr: 60382