Google Git
Sign in
chromium/devtools/devtools-frontend/refs/heads/chromium/7209
commit
6dec4b0d6556d0ca0f05a173ef1db38f73b22de1
[log]
author
Connor Clark <[email protected]>
Thu May 29 21:40:03 2025
committer
Devtools-frontend LUCI CQ <devtools-frontend-scoped@luci-project-accounts.iam.gserviceaccount.com>
Thu May 29 22:16:18 2025
tree
c02eb87d39b235416f4d550868765852822340ef
parent
e106effb189251b8d6eac6feb1efeec7dce6f68a [diff]
[RPP] Only render images with data url from resource model

The `ImageRef` component was rendering URLs from the trace, which is a
potential security issue given the devtools page has access to CDP.
Instead, only render images if found in the active resource tree model,
and use the data url given by `Page.getResourceContent`.

See: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/6532244/comment/c8aa4c3c_edff91ce/

Bug: 416449602
Change-Id: I3bc3c6f48456a13dc7dd10d0dfb66f3570c3c406
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/6605300
Commit-Queue: Connor Clark <[email protected]>
Reviewed-by: Paul Irish <[email protected]>
2 files changed
tree: c02eb87d39b235416f4d550868765852822340ef
  1. .vscode/
  2. build_overrides/
  3. config/
  4. docs/
  5. extension-api/
  6. extensions/
  7. front_end/
  8. inspector_overlay/
  9. node_modules/
  10. scripts/
  11. test/
  12. third_party/
  13. v8/
  14. build
  15. buildtools
  16. .clang-format
  17. .clang-format-ignore
  18. .editorconfig
  19. .git-blame-ignore-revs
  20. .gitallowed
  21. .gitattributes
  22. .gitignore
  23. .gitmodules
  24. .gn
  25. .mailmap
  26. .npmignore
  27. .npmrc
  28. .style.yapf
  29. .stylelintignore
  30. .stylelintrc.json
  31. AUTHORS
  32. BUILD.gn
  33. codereview.settings
  34. CONTRIBUTING.md
  35. DEPS
  36. DIR_METADATA
  37. eslint.config.mjs
  38. favicon.ico
  39. LICENSE
  40. OWNERS
  41. package-lock.json
  42. package.json
  43. PRESUBMIT.py
  44. README.md
  45. WATCHLISTS
README.md

Chrome DevTools frontend

npm package

The client-side of the Chrome DevTools, including all TypeScript & CSS to run the DevTools webapp.

Source code and documentation

The frontend is available on chromium.googlesource.com. Check out the Chromium DevTools documentation for instructions to set up, use, and maintain a DevTools front-end checkout, as well as design guidelines, and architectural documentation.

Source mirrors

DevTools frontend repository is mirrored on GitHub.

DevTools frontend is also available on NPM as the chrome-devtools-frontend package. It's not currently available via CJS or ES modules, so consuming this package in other tools may require some effort.

The version number of the npm package (e.g. 1.0.373466) refers to the Chromium commit position of latest frontend git commit. It's incremented with every Chromium commit, however the package is updated roughly daily.

Getting in touch

There are a few options to keep an eye on the latest and greatest of DevTools development: