Use GetSecurityOrigin

brave · Apr 12, 2023 · 237bffd · 237bffd
1 parent edf39ee
commit 237bffd
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/components/content_settings/renderer/brave_content_settings_agent_impl.cc b/components/content_settings/renderer/brave_content_settings_agent_impl.cc
@@ -229,7 +229,9 @@ bool BraveContentSettingsAgentImpl::AllowScriptFromSource(
   // executing the frame (which most, but not all, of the time will just be from
   // document.location
   if (secondary_url.SchemeIs(url::kDataScheme)) {
-    secondary_url = render_frame()->GetWebFrame()->GetDocument().Url();
+    secondary_url =
+        url::Origin(render_frame()->GetWebFrame()->GetSecurityOrigin())
+            .GetURL();
   }
   bool allow = ContentSettingsAgentImpl::AllowScriptFromSource(
       enabled_per_settings, script_url);