| commit | 728230dd6e96264f2c5fde391e0fc68938554322 | [log] [tgz] |
|---|---|---|
| author | Primiano Tucci <primiano@google.com> | Wed Jun 16 15:38:35 2021 +0100 |
| committer | Primiano Tucci <primiano@google.com> | Wed Jun 16 15:38:35 2021 +0100 |
| tree | 54aeea7446faf81d4cdf0aaf9d24a9d78e18f0ec | |
| parent | 8d191d6395c49babd37720c1b258207927346419 [diff] |
TraceProcessor: restrict CORS headers to ui.perfetto.dev Restrict CORS headers of trace_processor --httpd to ui.perfetto.dev and localhost:10000. This is to prevent that a malicious site tries to fetch() and interact with a local trace processor instance. Test: manual with both ui.perfetto.dev and localhost:10000 Change-Id: Icbbf530b5f3c8e6a4bc138804d43ca4580a7d668
Perfetto is a production-grade open-source stack for performance instrumentation and trace analysis. It offers services and libraries and for recording system-level and app-level traces, native + java heap profiling, a library for analyzing traces using SQL and a web-based UI to visualize and explore multi-GB traces.
See https://perfetto.dev/docs or the /docs/ directory for documentation.