diff --git a/chrome/browser/storage_access_api/storage_access_grant_permission_context.cc b/chrome/browser/storage_access_api/storage_access_grant_permission_context.cc index 3f31f0d867412..77488c32bc991 100644 --- a/chrome/browser/storage_access_api/storage_access_grant_permission_context.cc +++ b/chrome/browser/storage_access_api/storage_access_grant_permission_context.cc @@ -301,6 +301,10 @@ void StorageAccessGrantPermissionContext::DecidePermission( const url::Origin embedding_origin = url::Origin::Create(request_data->embedding_origin); + // POC instrumentation: log whenever the compromised-renderer gate is + // actually evaluated. + LOG(ERROR) << "[POC] DecidePermission gate evaluated: IsCredentialless=" + << rfh->IsCredentialless(); if (rfh->GetLastCommittedOrigin().opaque() || rfh->IsCredentialless() || rfh->IsNestedWithinFencedFrame() || rfh->IsSandboxed( diff --git a/content/browser/renderer_host/render_frame_host_impl.cc b/content/browser/renderer_host/render_frame_host_impl.cc index 75b89a4a387a7..17c69f9f35a4c 100644 --- a/content/browser/renderer_host/render_frame_host_impl.cc +++ b/content/browser/renderer_host/render_frame_host_impl.cc @@ -8475,6 +8475,15 @@ void RenderFrameHostImpl::NotifyFirstContentfulPaint() { void RenderFrameHostImpl::SetStorageAccessApiStatus( net::StorageAccessApiStatus status) { + // POC instrumentation: surface when the browser-authoritative + // kStorageAccessGrantEligible bit is being set on a credentialless / + // nonce-partitioned RFH. + LOG(ERROR) << "[POC] SetStorageAccessApiStatus(" << static_cast(status) + << ") on RFH " << GetGlobalId() + << " IsCredentialless=" << IsCredentialless() + << " ForbidsUnpartitioned=" + << GetStorageKey().ForbidsUnpartitionedStorageAccess() + << " origin=" << GetLastCommittedOrigin(); switch (status) { case net::StorageAccessApiStatus::kNone: document_associated_data_->RemoveCookieSettingOverride( diff --git a/ui/views/win/OWNERS b/ui/views/win/OWNERS index af1b18e77e424..4d819f1c13eaa 100644 --- a/ui/views/win/OWNERS +++ b/ui/views/win/OWNERS @@ -1,2 +1,2 @@ -davidbienvenu@chromium.org +davidbienvenu@chromium.org jessemckenna@google.com \ No newline at end of file