[TabGuard] Fixed regression in about:blank handling (thanks NDevTK for reporting).

This commit is contained in:
hackademix 2022-08-30 13:56:28 +02:00
parent 651e476650
commit c22eafc35b
1 changed files with 16 additions and 3 deletions

View File

@ -121,11 +121,24 @@ var TabGuard = (() => {
code: "window.origin === 'null' ? window.location.href : window.origin"
});
} catch (e) {
// We don't have permissions to run in this tab, probably because it has been left empty.
debug(e);
}
// If it's about:blank and it has got an opener, let's assume the opener
// is the real origin and it's using the empty tab to run scripts.
if (tab.url === "about:blank") {
if (tab.openerTabId > 0) {
let openerTab = TabCache.get(tab.openerTabId);
if (openerTab) {
tab.url = openerTab.url;
}
}
}
if (tab.url !== "about:blank") {
debug(`Real origin for ${tab._externalUrl} (tab ${tab.id}) is ${tab.url}.`);
if (!ns.policy.can(tab.url, "script")) return;
}
}
suspiciousDomains.push(getDomain(tab.url));
}));