summaryrefslogtreecommitdiff
path: root/Kernel/Time
diff options
context:
space:
mode:
authorTobias Christiansen <tobi@tobyase.de>2021-04-19 14:30:08 +0200
committerAndreas Kling <kling@serenityos.org>2021-05-07 22:34:34 +0200
commit1b6824d2962b534b34b2d3ec6ba3ab5f77bc68b5 (patch)
tree64f45efd5d2fc4e88716b6f0edf3a9762c361394 /Kernel/Time
parent9e49895bbf941339e971be383723822fbd422b23 (diff)
downloadserenity-1b6824d2962b534b34b2d3ec6ba3ab5f77bc68b5.zip
LibWeb: Make frames nesting-aware and disallow deep nesting
A Frame now knows about its nesting-level. The FrameLoader checks whether the recursion level of the current frame allows it to be displayed and if not doesn't even load the requested resource. The nesting-check is done on a per-URL-basis, so there can be many many nested Frames as long as they have different URLs. If there are however Frames with the same URL nested inside each other we only allow this to happen 3 times. This mitigates infinetely recursing <iframe>s in an HTML-document crashing the browser with an OOM.
Diffstat (limited to 'Kernel/Time')
0 files changed, 0 insertions, 0 deletions