angler-fishThe Vulnerability History Project

Before this change, fullscreen and mouse lock were allowed on file:// URLs without giving the user a chance to Allow or Deny them and without showing any persistent UI. This change makes it so that users are always prompted with persistent UI on file:// URLs. There is no way to remember the preference to show or hide the persistent permission bubble because file:// URLs lack a clear origin concept.

      BUG=455953,455882
TEST=Download http://adrifelt.github.io/demos/all-permissions (right click, Save As). Open the downloaded file in Chrome. Click &quotFullscreen&quot: a permissions bubble should have &quotDismiss&quot and &quotExit full screen&quot buttons, where &quotDismiss&quot just dismisses the bubble. If you click Dismiss, the bubble should again show up when you enter fullscreen a second time. For Pointer Lock, the bubble should show Allow and Deny buttons, and the mouse should not be locked until you click Allow. Clicking Allow or Deny should not affect the behavior of the bubble if you press Pointer Lock again.

Review URL: https://codereview.chromium.org/903683005

Cr-Commit-Position: refs/heads/master@{#316322}
    
commit 6eca4fd0c63d0b31729e35ad883fb07b27dfca73
-3
+2 -5
+2 -2
+1 -1
+4 -35
-2
+4 -17
+8 -25
+3 -12
+1 -3
+4 -15
+3 -24
expand_less