add note about security and new subclasses

BUG=skia:
GOLD_TRYBOT_URL= https://gold.skia.org/search2?unt=true&query=source_type%3Dgm&master=false&issue=1667663004

Review URL: https://codereview.chromium.org/1667663004
This commit is contained in:
reed 2016-02-03 16:31:35 -08:00 committed by Commit bot
parent ff172dab92
commit 50b98b424c

View File

@ -46,6 +46,15 @@
#include "SkTileImageFilter.h" #include "SkTileImageFilter.h"
#include "SkXfermodeImageFilter.h" #include "SkXfermodeImageFilter.h"
// Security note:
//
// As new subclasses are added here, they should be reviewed by chrome security before they
// support deserializing cross-process: chrome-security@google.com. SampleFilterFuzz.cpp should
// also be amended to exercise the new subclass.
//
// See SkReadBuffer::isCrossProcess() and SkPicture::PictureIOSecurityPrecautionsEnabled()
//
/* /*
* None of these are strictly "required" for Skia to operate. * None of these are strictly "required" for Skia to operate.
* *