angler-fishThe Vulnerability History Project

[Extensions] Don't allow built-in extensions code to be overridden

      BUG=546677

Review URL: https://codereview.chromium.org/1417513003

Cr-Commit-Position: refs/heads/master@{#356654}
by Lillian the Whale Shark 2015-10-28 21:43:58 UTC
commit 83a4b3aa72d98fe4176b4a54c8cea227ed966570
Chromium Fix CVE-2016-1622
chrome/browser/extensions/extension_bindings_apitest.cc
-27
chrome/test/data/extensions/api_test/bindings/externally_connectable_everywhere/manifest.json
-9
chrome/test/data/extensions/api_test/bindings/override_exports.html
-44
extensions/renderer/api_test_base.cc
+7 -8
extensions/renderer/event_unittest.cc
+19 -21
extensions/renderer/module_system.cc
+1 -33
extensions/renderer/module_system_unittest.cc
+17 -22
extensions/renderer/resources/app_runtime_custom_bindings.js
+1 -1
extensions/renderer/resources/app_window_custom_bindings.js
+4 -4
extensions/renderer/resources/binding.js
+1 -1
extensions/renderer/resources/browser_test_environment_specific_bindings.js
+2 -2
extensions/renderer/resources/context_menus_custom_bindings.js
+1 -1
extensions/renderer/resources/context_menus_handlers.js
+1 -1
extensions/renderer/resources/declarative_webrequest_custom_bindings.js
+1 -1
extensions/renderer/resources/entry_id_manager.js
+3 -3
extensions/renderer/resources/event.js
+4 -4
extensions/renderer/resources/extension_custom_bindings.js
+1 -1
extensions/renderer/resources/guest_view/extension_options/extension_options.js
+1 -1
extensions/renderer/resources/guest_view/extension_options/extension_options_constants.js
+1 -2
extensions/renderer/resources/guest_view/extension_options/extension_options_events.js
+1 -1
extensions/renderer/resources/guest_view/extension_view/extension_view.js
+1 -1
extensions/renderer/resources/guest_view/extension_view/extension_view_constants.js
+1 -1
extensions/renderer/resources/guest_view/extension_view/extension_view_events.js
+1 -1
extensions/renderer/resources/guest_view/extension_view/extension_view_internal.js
+2 -3
extensions/renderer/resources/guest_view/guest_view.js
+3 -3
extensions/renderer/resources/guest_view/guest_view_attributes.js
+1 -1
extensions/renderer/resources/guest_view/guest_view_container.js
+1 -1
extensions/renderer/resources/guest_view/guest_view_events.js
+2 -2
extensions/renderer/resources/guest_view/web_view/web_view.js
+1 -1
extensions/renderer/resources/guest_view/web_view/web_view_action_requests.js
+1 -1
extensions/renderer/resources/guest_view/web_view/web_view_constants.js
+1 -1
extensions/renderer/resources/guest_view/web_view/web_view_events.js
+1 -1
extensions/renderer/resources/guest_view/web_view/web_view_internal.js
+2 -3
extensions/renderer/resources/guest_view/web_view/web_view_request_custom_bindings.js
+1 -1
extensions/renderer/resources/i18n_custom_bindings.js
+1 -1
extensions/renderer/resources/image_util.js
+2 -2
extensions/renderer/resources/json_schema.js
+1 -1
extensions/renderer/resources/last_error.js
+6 -6
extensions/renderer/resources/messaging.js
+11 -11
extensions/renderer/resources/messaging_utils.js
+1 -1
extensions/renderer/resources/mime_handler_private_custom_bindings.js
+1 -1
extensions/renderer/resources/mojo_private_custom_bindings.js
+1 -1
extensions/renderer/resources/permissions_custom_bindings.js
+1 -1
extensions/renderer/resources/printer_provider_custom_bindings.js
+1 -1
extensions/renderer/resources/runtime_custom_bindings.js
+2 -2
extensions/renderer/resources/schema_utils.js
+4 -4
extensions/renderer/resources/send_request.js
+5 -5
extensions/renderer/resources/serial_custom_bindings.js
+1 -1
extensions/renderer/resources/set_icon.js
+1 -1
extensions/renderer/resources/storage_area.js
+1 -1
extensions/renderer/resources/test_custom_bindings.js
+1 -1
extensions/renderer/resources/uncaught_exception_handler.js
+7 -7
extensions/renderer/resources/utils.js
+6 -6
extensions/renderer/resources/web_request_custom_bindings.js
+1 -1
extensions/renderer/resources/web_request_internal_custom_bindings.js
+2 -2
extensions/renderer/utils_unittest.cc
+4 -4
expand_less