diff options
author | Jüri Valdmann <juri.valdmann@qt.io> | 2018-10-17 10:35:31 +0200 |
---|---|---|
committer | Jüri Valdmann <juri.valdmann@qt.io> | 2018-10-18 09:45:25 +0000 |
commit | 098680710ad3db2e9bd62928a9e2fb1c7cb8c4a9 (patch) | |
tree | e2ff2f318f569eceb4457aaf35a95bd8774e1151 /src/core/render_widget_host_view_qt.cpp | |
parent | 69d8370f5440854c23d20648c9d35096c12426fe (diff) |
Allow XMLHttpRequests from qrc to file
Add test for cross origin XMLHttpRequests from/to custom schemes. By default,
this is not allowed, but can be changed by adding an origin access whitelist
entry to blink::WebSecurityPolicy in the renderer.
Do this for the qrc scheme. As a result SecurityOrigin("qrc").CanRequest("file")
will return true, which makes DocumentThreadableLoader::Start disable CORS for
the request. Otherwise, CORS would be used, which only works with CORS enabled
schemes.
Fixes: QTBUG-70228
Change-Id: I2da60fddbbfb490c6d2f03329be286dbc28e1f12
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Diffstat (limited to 'src/core/render_widget_host_view_qt.cpp')
0 files changed, 0 insertions, 0 deletions