starred/moli
1
0
Fork 0
mirror of https://github.com/lexmount/moli.git synced 2026-10-25 08:01:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(csp): check the initiator before javascript URL navigation

Browse Source 
Validation on this branch: cargo fmt --all; cargo clippy --workspace --all-targets --all-features -- -D warnings.
Nextest and WPT reruns omitted at the user's request.
This commit is contained in:
ldm0
2026-10-09 02:52:24 +08:00
committed by Donough Liu
parent 0281dcf3e6
commit a7ce9db918
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
moli-renderer-v8/src/context_bootstrap/location_navigation.rs
+21
View File
@@ -275,6 +275,27 @@ fn navigate_location_object_with_source_element_and_child_navigate_event<'s>(
} else {
capture_location_navigation_source(scope, owner, &resolved)
};
if resolved.scheme() == "javascript" {
let source_context = scope
.get_incumbent_context()
.unwrap_or_else(|| scope.get_entered_or_microtask_context());
let source_context = v8::Local::new(scope, source_context);
if let Some(source_host) = crate::util::context_host_ptr_from_context_slot(source_context) {
let host = unsafe { &mut *source_host };
let dispatch = host
.window_execution_context_identity_for_access_check(source_context)
.map(|identity| identity.dispatch_scope())
.unwrap_or(crate::native_bridge::OwnerDispatchScope::Top);
let scope = &mut v8::ContextScope::new(scope, source_context);
if !host.allows_inline_javascript_navigation_by_csp(
scope,
dispatch,
&crate::javascript_url::csp_source(&resolved),
) {
return;
}
}
}
let exact_same_href = current_href == resolved.as_str();
if !matches!(kind, LocationNavigationKind::Reload)
&& exact_same_href