<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>123903</bug_id>
          
          <creation_ts>2013-11-06 11:05:30 -0800</creation_ts>
          <short_desc>WKRemoteObjectInterface should keep track of allowed decodable classes</short_desc>
          <delta_ts>2013-11-06 11:21:42 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Anders Carlsson">andersca</reporter>
          <assigned_to name="Anders Carlsson">andersca</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>947791</commentid>
    <comment_count>0</comment_count>
    <who name="Anders Carlsson">andersca</who>
    <bug_when>2013-11-06 11:05:30 -0800</bug_when>
    <thetext>WKRemoteObjectInterface should keep track of allowed decodable classes</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947794</commentid>
    <comment_count>1</comment_count>
      <attachid>216195</attachid>
    <who name="Anders Carlsson">andersca</who>
    <bug_when>2013-11-06 11:08:54 -0800</bug_when>
    <thetext>Created attachment 216195
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947801</commentid>
    <comment_count>2</comment_count>
    <who name="Anders Carlsson">andersca</who>
    <bug_when>2013-11-06 11:21:42 -0800</bug_when>
    <thetext>Committed r158763: &lt;http://trac.webkit.org/changeset/158763&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>216195</attachid>
            <date>2013-11-06 11:08:54 -0800</date>
            <delta_ts>2013-11-06 11:15:26 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-123903-20131106110853.patch</filename>
            <type>text/plain</type>
            <size>5913</size>
            <attacher name="Anders Carlsson">andersca</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTU4NzYxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0Mi9D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</data>
<flag name="review"
          id="239116"
          type_id="1"
          status="+"
          setter="sam"
    />
          </attachment>
      

    </bug>

</bugzilla>