Index: extensions/renderer/resources/guest_view/guest_view.js |
diff --git a/extensions/renderer/resources/guest_view/guest_view.js b/extensions/renderer/resources/guest_view/guest_view.js |
index 4ab0e571d68f0030ddebc1d068619dfce7c3d0ad..19a035f1c1e38bf0e6ca62a294d2d3f2536f2e0c 100644 |
--- a/extensions/renderer/resources/guest_view/guest_view.js |
+++ b/extensions/renderer/resources/guest_view/guest_view.js |
@@ -48,6 +48,8 @@ function GuestViewImpl(guestView, viewType, guestInstanceId) { |
// Prevent GuestViewImpl inadvertently inheriting code from the global Object, |
// allowing a pathway for executing unintended user code execution. |
+// TODO(wjmaclean): Use utils.expose() here instead? Track down other issues |
+// of Object inheritance. https://crbug.com/701034 |
GuestViewImpl.prototype.__proto__ = null; |
// Possible states. |