117219 2013-06-04 18:43:32 -0700 tighten plugin sandbox profiles against symlink attacks 2013-06-04 23:03:29 -0700 1 1 1 Unclassified WebKit WebKit2 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 scooper scooper commit-queue eric jschuh scooper oldest_to_newest 897104 0 scooper 2013-06-04 18:43:32 -0700 tighten plugin sandbox profiles against symlink attacks 897105 1 203746 scooper 2013-06-04 18:45:47 -0700 Created attachment 203746 Patch 897127 2 203746 commit-queue 2013-06-04 21:22:33 -0700 Comment on attachment 203746 Patch Clearing flags on attachment: 203746 Committed r151197: <http://trac.webkit.org/changeset/151197> 897128 3 commit-queue 2013-06-04 21:22:35 -0700 All reviewed patches have been landed. Closing bug. 203746 2013-06-04 18:45:47 -0700 2013-06-04 21:22:33 -0700 Patch bug-117219-20130604184417.patch text/plain 2142 scooper U3VidmVyc2lvbiBSZXZpc2lvbjogMTUxMDM0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0Mi9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViS2l0Mi9DaGFuZ2VMb2cKaW5kZXggYmU4YWRmNzhkNzBiNzU0 NWNkMzBkNTI1NTIyZTg5ZjE1YmRjZjQ3NS4uNTVmZDA0MTRjM2Y0ODgwYTFjNDQ4ODZiOTM5ZDBh YjViOTI5ZWY0ZSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdDIvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJLaXQyL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE4IEBACisyMDEzLTA2LTA0ICBTaW1v biBDb29wZXIgIDxzY29vcGVyQGFwcGxlLmNvbT4KKworICAgICAgICBUaWdodGVuIHBsdWdpbiBz YW5kYm94IHByb2ZpbGVzIGFnYWluc3Qgc3ltbGluayBhdHRhY2tzCisgICAgICAgIGh0dHBzOi8v YnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMTcyMTkKKyAgICAgICAgPHJkYXI6Ly9w cm9ibGVtLzEzMDQ0NTY5PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgor CisgICAgICAgIFRoaXMgaW5zZXJ0cyBkZW55IHJ1bGVzIGZvciBjcmVhdGluZyBzeW1ib2xpYyBs aW5rcy4gVGhlIHJ1bGVzIGFyZQorICAgICAgICBpbnNlcnRlZCBhdCB0aGUgZW5kIG9mIHNhbmRi b3ggcHJvZmlsZSBjb21waWxhdGlvbiBieSBvdmVycmlkaW5nIHRoZQorICAgICAgICBmaW5hbGl6 ZXIuICBUaGUgaW5pdGlhbCB2YWx1ZSBvZiAlZmluYWxpemUgbXVzdCBiZSB0aGUgbGFzdCBmdW5j dGlvbgorICAgICAgICBjYWxsZWQuCisKKyAgICAgICAgKiBSZXNvdXJjZXMvUGx1Z0luU2FuZGJv eFByb2ZpbGVzL2NvbS5hcHBsZS5XZWJLaXQucGx1Z2luLWNvbW1vbi5zYjoKKwogMjAxMy0wNS0z MSAgRGVhbiBKYWNrc29uICA8ZGlub0BhcHBsZS5jb20+CiAKICAgICAgICAgRG9uJ3QgY3JlYXRl IGFuIGFjY2VsZXJhdGVkIGNvbXBvc2l0aW5nIGxheWVyIHVubGVzcyB3ZSBoYXZlIHRvIGZvciBz bmFwc2hvdHRpbmcgcGx1Zy1pbnMKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQyL1Jlc291cmNl cy9QbHVnSW5TYW5kYm94UHJvZmlsZXMvY29tLmFwcGxlLldlYktpdC5wbHVnaW4tY29tbW9uLnNi IGIvU291cmNlL1dlYktpdDIvUmVzb3VyY2VzL1BsdWdJblNhbmRib3hQcm9maWxlcy9jb20uYXBw bGUuV2ViS2l0LnBsdWdpbi1jb21tb24uc2IKaW5kZXggNmE5MmVlMDA4ZDg3M2RlZDExNWRkMzUy NDk2YTI2ZDdkNGU2NDUxOS4uZTQ2NDllZWI3NjliM2U1MmMyOWIwYzk2NTc0ZTRkYzUxNmQzNTU1 OCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdDIvUmVzb3VyY2VzL1BsdWdJblNhbmRib3hQcm9m aWxlcy9jb20uYXBwbGUuV2ViS2l0LnBsdWdpbi1jb21tb24uc2IKKysrIGIvU291cmNlL1dlYktp dDIvUmVzb3VyY2VzL1BsdWdJblNhbmRib3hQcm9maWxlcy9jb20uYXBwbGUuV2ViS2l0LnBsdWdp bi1jb21tb24uc2IKQEAgLTI5MywzICsyOTMsMTYgQEAKICAgICAoZ2xvYmFsLW5hbWUgImNvbS5h cHBsZS5jb3Jlc2VydmljZXMuYXBwbGVldmVudHMiKQogICAgIChnbG9iYWwtbmFtZSAiY29tLmFw cGxlLmRvY2suc2VydmVyIikKICAgICAoZ2xvYmFsLW5hbWUtcmVnZXggIyJeY29tXC5hcHBsZVwu ZGlzdHJpYnV0ZWRfbm90aWZpY2F0aW9ucyIpKQorCis7OyBUaGlzIGluc2VydHMgZGVueSBydWxl cyBmb3IgY3JlYXRpbmcgc3ltYm9saWMgbGlua3MuIFRoZSBydWxlcyBhcmUgaW5zZXJ0ZWQKKzs7 IGF0IHRoZSBlbmQgb2Ygc2FuZGJveCBwcm9maWxlIGNvbXBpbGF0aW9uIGJ5IG92ZXJyaWRpbmcg dGhlIGZpbmFsaXplci4gVGhlCis7OyBpbml0aWFsIHZhbHVlIG9mICVmaW5hbGl6ZSBtdXN0IGJl IHRoZSBsYXN0IGZ1bmN0aW9uIGNhbGxlZC4KKyhsZXRyZWMKKyAgICgob3JpZ2luYWwtJWZpbmFs aXplICVmaW5hbGl6ZSkKKyAgICAod2Via2l0LSVmaW5hbGl6ZQorICAgICAgICAobGFtYmRhICgp CisgICAgICAgICAgICAoaWYgKGRlZmluZWQ/ICd2bm9kZS10eXBlKQorICAgICAgICAgICAgICAg IChkZW55IGZpbGUtd3JpdGUtY3JlYXRlCisgICAgICAgICAgICAgICAgICAgICAgKHZub2RlLXR5 cGUgU1lNTElOSykpKQorICAgICAgICAgICAgKG9yaWdpbmFsLSVmaW5hbGl6ZSkpKSkKKyAgIChz ZXQhICVmaW5hbGl6ZSB3ZWJraXQtJWZpbmFsaXplKSkK