mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-26 09:45:06 +02:00
LibWeb: Make Environment's top level origin nullable
This matches the definition in the spec, and is also a step towards removing the default constructor of URL::Origin.
This commit is contained in:
committed by
Shannon Booth
parent
556acd82ee
commit
937994cfaa
Notes:
github-actions[bot]
2025-05-27 02:49:41 +00:00
Author: https://github.com/shannonbooth Commit: https://github.com/LadybirdBrowser/ladybird/commit/937994cfaa8 Pull-request: https://github.com/LadybirdBrowser/ladybird/pull/4878 Reviewed-by: https://github.com/trflynn89
@@ -420,7 +420,7 @@ WebIDL::ExceptionOr<void> HTMLInputElement::show_picker()
|
||||
// and this's type attribute is not in the File Upload state or Color state, then throw a "SecurityError" DOMException.
|
||||
// NOTE: File and Color inputs are exempted from this check for historical reason: their input activation behavior also shows their pickers,
|
||||
// and has never been guarded by an origin check.
|
||||
if (!relevant_settings_object(*this).origin().is_same_origin(relevant_settings_object(*this).top_level_origin)
|
||||
if (!relevant_settings_object(*this).origin().is_same_origin(relevant_settings_object(*this).top_level_origin.value())
|
||||
&& m_type != TypeAttributeState::FileUpload && m_type != TypeAttributeState::Color) {
|
||||
return WebIDL::SecurityError::create(realm(), "Cross origin pickers are not allowed"_string);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user