Favicon images are requested by the tab element inside the main chrome window, so we need a patch to make sure they are isolated by the first party domain of the loading document. This ticket has been spun off from #13670 (moved).
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Child items 0
Show closed items
No child items are currently assigned. Use child items to break down this issue into smaller parts.
Linked items 0
Link issues together to show that they're related.
Learn more.
This patch looks OK to me. We should make sure to add tests both for default favicons, as well as favicons specified in HTML (as the latter may change if the OwnerDoc is chrome).
arthur - Can you and boklm work out who will write the test cases for this? I think we should cover both HTML and default favicons in the tests. Not sure if that means it requires a full integration test or if it can still be done with a unit test... If we do decide we need a heavyweight integration test, perhaps we should cover OCSP too?
Trac: Cc: mikeperry, gk to mikeperry, gk, boklm Status: needs_review to needs_revision