angler-fishThe Vulnerability History Project

bindings: Stop using the given creationContext in public APIs.

      The creation context passed through the public APIs may be unsafe
and faked by user script.  The callers of the APIs often do not
check if the context is safe and valid or not.  Plus, there shouldn't
be a case that a caller needs to handle cross-origin cases, so let us
always use the current context instead of the creation context given
through the callers, which are not reliable.

BUG=497507

Review URL: https://codereview.chromium.org/1166793006

git-svn-id: svn://svn.chromium.org/blink/trunk@196755 bbb929c8-8fbe-4397-9dbb-9b2b20218538
    
commit ca9573d5b634524afefe1e65bb905b89b6545970
+2 -4
+2 -4
+2 -4
+4 -6
expand_less