Chrome · Browser
CVE-2026-79225
Logic Error in Browser
Overview
Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
chrome/browser/chrome_content_browser_client.cc
Patch
From ea3598ed49db149f49fea869b5cb4d1bde0de32e Mon Sep 17 00:00:00 2001 From: Ryo Hashimoto <[email protected]> Date: Thu, 16 Jul 2026 09:24:51 -0700 Subject: [PATCH] android: Block renderer debug URL if DevTools is not allowed BUG=533059149 Change-Id: I5315837844c3d801778762a5fea5465a0c3d9d96 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8068618 Reviewed-by: Danil Somsikov <[email protected]> Commit-Queue: Ryo Hashimoto <[email protected]> Cr-Commit-Position: refs/heads/main@{#1663171} --- diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc index 7a8f0d2..9c1c3cc 100644 --- a/chrome/browser/chrome_content_browser_client.cc +++ b/chrome/browser/chrome_content_browser_client.cc @@ -549,7 +549,6 @@ #include "chrome/browser/actor/actor_keyed_service.h" #include "chrome/browser/actor/actor_keyed_service_factory.h" #include "chrome/browser/devtools/chrome_devtools_manager_delegate.h" -#include "chrome/browser/devtools/devtools_window.h" #include "chrome/browser/digital_credentials/digital_identity_provider_desktop.h" #include "chrome/browser/direct_sockets/chrome_direct_sockets_delegate.h" #include "chrome/browser/indigo/onboarding/indigo_onboarding_dialog.h" @@ -640,6 +639,10 @@ #include "components/captive_portal/content/captive_portal_url_loader_throttle.h" #endif +#if BUILDFLAG(ENABLE_DEVTOOLS_FRONTEND) +#include "chrome/browser/devtools/devtools_window.h" +#endif + #if BUILDFLAG(ENABLE_EXTENSIONS_CORE) #include "chrome/browser/extensions/chrome_content_browser_client_extensions_part.h" #include "chrome/browser/extensions/chrome_extension_cookies.h" @@ -7790,7 +7793,7 @@ const GURL& url, content::BrowserContext* context, content::RenderFrameHost* render_frame_host) { -#if !BUILDFLAG(IS_ANDROID) +#if BUILDFLAG(ENABLE_DEVTOOLS_FRONTEND) // If devtools access is blocked for the page, debug URLs should also be // blocked for the page. Profile* profile = Profile::FromBrowserContext(context);
Loading diff…
Original Bug Report
The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
References
On This Page