mirror of
https://github.com/RGBCube/serenity
synced 2025-07-24 21:37:34 +00:00
LibWeb: Use proper origins in Request::has_redirect_tainted_origin()
URL::url_origin() is a globally available function now, so let's use it!
This commit is contained in:
parent
ec34d60e5c
commit
a1de15498d
1 changed files with 4 additions and 2 deletions
|
@ -159,9 +159,11 @@ bool Request::has_redirect_tainted_origin() const
|
||||||
}
|
}
|
||||||
|
|
||||||
// 2. If url’s origin is not same origin with lastURL’s origin and request’s origin is not same origin with lastURL’s origin, then return true.
|
// 2. If url’s origin is not same origin with lastURL’s origin and request’s origin is not same origin with lastURL’s origin, then return true.
|
||||||
// FIXME: Actually use the given origins once we have https://url.spec.whatwg.org/#concept-url-origin.
|
auto const* request_origin = m_origin.get_pointer<HTML::Origin>();
|
||||||
if (!HTML::Origin().is_same_origin(HTML::Origin()) && HTML::Origin().is_same_origin(HTML::Origin()))
|
if (!URL::url_origin(url).is_same_origin(URL::url_origin(*last_url))
|
||||||
|
&& (request_origin == nullptr || !request_origin->is_same_origin(URL::url_origin(*last_url)))) {
|
||||||
return true;
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
// 3. Set lastURL to url.
|
// 3. Set lastURL to url.
|
||||||
last_url = url;
|
last_url = url;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue