diff options
Diffstat (limited to 'Source/WebCore/loader/DocumentThreadableLoader.cpp')
| -rw-r--r-- | Source/WebCore/loader/DocumentThreadableLoader.cpp | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/Source/WebCore/loader/DocumentThreadableLoader.cpp b/Source/WebCore/loader/DocumentThreadableLoader.cpp index e8fe0185e..d51751ca5 100644 --- a/Source/WebCore/loader/DocumentThreadableLoader.cpp +++ b/Source/WebCore/loader/DocumentThreadableLoader.cpp @@ -127,6 +127,11 @@ void DocumentThreadableLoader::makeSimpleCrossOriginAccessRequest(const Resource return; } + if (!securityOrigin()->allowsCrossOriginRequests()) { + m_client->didFailAccessControlCheck(ResourceError(errorDomainWebKitInternal, 0, request.url().string(), "Cross origin requests are not allowed from " + securityOrigin()->toString() + ".")); + return; + } + loadRequest(request, DoSecurityCheck); } |