159322 2016-06-30 16:04:30 -0700 Create a generic "linked-on-or-after" check for new CSP Rules 2016-06-30 17:04:28 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 jiewen_tan jiewen_tan bfulgham commit-queue jiewen_tan mkwst webkit-bug-importer oldest_to_newest 1206919 0 jiewen_tan 2016-06-30 16:04:30 -0700 Summary: We have hit too many broken applications. We need to make the new CSP behavior for local files consistent. We should take the application-specific workarounds we made for Ecobee and Quora, and apply them across the board. See “Bug 157005 - CSP: Add app-specific workaround for Ecobee and Quora” 1206920 1 jiewen_tan 2016-06-30 16:05:01 -0700 <rdar://problem/27117220> 1206924 2 282489 jiewen_tan 2016-06-30 16:11:45 -0700 Created attachment 282489 Patch 1206928 3 282489 bfulgham 2016-06-30 16:28:07 -0700 Comment on attachment 282489 Patch r=me 1206931 4 jiewen_tan 2016-06-30 16:35:59 -0700 (In reply to comment #3) > Comment on attachment 282489 [details] > Patch > > r=me Thanks, Brent. 1206941 5 jiewen_tan 2016-06-30 17:04:28 -0700 Committed r202719: <http://trac.webkit.org/changeset/202719> 282489 2016-06-30 16:11:45 -0700 2016-06-30 16:28:07 -0700 Patch bug-159322-20160630161124.patch text/plain 4443 jiewen_tan U3VidmVyc2lvbiBSZXZpc2lvbjogMjAyNjQ3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggY2Q3MGQxM2M0M2E1MTc5 MjIxODk2MGZkYzE0NWI0ZWIwNTA3NzZlMC4uNWFjNjY1OGU1YTgwYWNkYTE5Yzc2ODgxMzQ5ZWU3 OTQ4Y2E1OTY4OCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDIwIEBACisyMDE2LTA2LTMwICBKaWV3 ZW4gVGFuICA8amlld2VuX3RhbkBhcHBsZS5jb20+CisKKyAgICAgICAgQ3JlYXRlIGEgZ2VuZXJp YyAibGlua2VkLW9uLW9yLWFmdGVyIiBjaGVjayBmb3IgbmV3IENTUCBSdWxlcworICAgICAgICBo dHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTU5MzIyCisgICAgICAgIDxy ZGFyOi8vcHJvYmxlbS8yNzExNzIyMD4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9P UFMhKS4KKworICAgICAgICBDcmVhdGUgYSBnZW5lcmljICJsaW5rZWQtb24tb3ItYWZ0ZXIiIGNo ZWNrIGZvciBuZXcgQ1NQIFJ1bGVzIGFuZCBjbGVhbnVwCisgICAgICAgIHF1aXJrcyBmb3IgRWNv YmVlLCBRdW9yYSBhbmQgWHRyYU1hdC4KKworICAgICAgICAqIHBsYXRmb3JtL1J1bnRpbWVBcHBs aWNhdGlvbkNoZWNrcy5oOgorICAgICAgICAqIHBsYXRmb3JtL1J1bnRpbWVBcHBsaWNhdGlvbkNo ZWNrcy5tbToKKyAgICAgICAgKFdlYkNvcmU6OklPU0FwcGxpY2F0aW9uOjppc0Vjb2JlZSk6IERl bGV0ZWQuCisgICAgICAgIChXZWJDb3JlOjpJT1NBcHBsaWNhdGlvbjo6aXNRdW9yYSk6IERlbGV0 ZWQuCisgICAgICAgIChXZWJDb3JlOjpJT1NBcHBsaWNhdGlvbjo6aXNYdHJhTWF0aCk6IERlbGV0 ZWQuCisKIDIwMTYtMDYtMjkgIE5hbiBXYW5nICA8bl93YW5nQGFwcGxlLmNvbT4KIAogICAgICAg ICBBWDogQ3Jhc2ggaW4gV2ViQ29yZTo6RG9jdW1lbnQ6OmZvY3VzTmF2aWdhdGlvblN0YXJ0aW5n Tm9kZShXZWJDb3JlOjpGb2N1c0RpcmVjdGlvbikgY29uc3QgKyAxMjgKZGlmZiAtLWdpdCBhL1Nv dXJjZS9XZWJLaXQvbWFjL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvbWFjL0NoYW5nZUxvZwpp bmRleCAzZmZiYmEzYWQ3YzhjZDJmYzY5ODViYTU3MGM5ZTQyZjBhNmVmYmYxLi45Y2Q1YWE3MTk5 MmEwMGYyMGE0NmU4NGZhOGZjOGMzN2ZmMjU3ZTQyIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0 L21hYy9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYktpdC9tYWMvQ2hhbmdlTG9nCkBAIC0xLDMg KzEsMTQgQEAKKzIwMTYtMDYtMzAgIEppZXdlbiBUYW4gIDxqaWV3ZW5fdGFuQGFwcGxlLmNvbT4K KworICAgICAgICBDcmVhdGUgYSBnZW5lcmljICJsaW5rZWQtb24tb3ItYWZ0ZXIiIGNoZWNrIGZv ciBuZXcgQ1NQIFJ1bGVzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVn LmNnaT9pZD0xNTkzMjIKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzI3MTE3MjIwPgorCisgICAg ICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogV2ViVmlldy9XZWJW aWV3Lm1tOgorICAgICAgICAoc2hvdWxkQWxsb3dDb250ZW50U2VjdXJpdHlQb2xpY3lTb3VyY2VT dGFyVG9NYXRjaEFueVByb3RvY29sKToKKwogMjAxNi0wNi0yNyAgQW5kZXJzIENhcmxzc29uICA8 YW5kZXJzY2FAYXBwbGUuY29tPgogCiAgICAgICAgIFdlYktpdDo6V2ViUGF5bWVudENvb3JkaW5h dG9yIGxlYWsKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL1J1bnRpbWVBcHBs aWNhdGlvbkNoZWNrcy5oIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vUnVudGltZUFwcGxpY2F0 aW9uQ2hlY2tzLmgKaW5kZXggNDc5ZWJlYWViM2UyZWE2OGUwMDZhMDM3ODcwOGRkNTUzYjFkOTIy Yi4uNTZiMTkwMWE3ZGEyN2Y3NGI2N2Q0YjE1YmNkZDljNmRkYjhhYmY4ZCAxMDA2NDQKLS0tIGEv U291cmNlL1dlYkNvcmUvcGxhdGZvcm0vUnVudGltZUFwcGxpY2F0aW9uQ2hlY2tzLmgKKysrIGIv U291cmNlL1dlYkNvcmUvcGxhdGZvcm0vUnVudGltZUFwcGxpY2F0aW9uQ2hlY2tzLmgKQEAgLTcy LDkgKzcyLDYgQEAgYm9vbCBpc05BU0FIRCgpOwogV0VCQ09SRV9FWFBPUlQgYm9vbCBpc1RoZUVj b25vbWlzdE9uSXBob25lKCk7CiBXRUJDT1JFX0VYUE9SVCBib29sIGlzV2ViUHJvY2VzcygpOwog Ym9vbCBpc0lCb29rcygpOwotV0VCQ09SRV9FWFBPUlQgYm9vbCBpc0Vjb2JlZSgpOwotV0VCQ09S RV9FWFBPUlQgYm9vbCBpc1F1b3JhKCk7Ci1XRUJDT1JFX0VYUE9SVCBib29sIGlzWHRyYU1hdGgo KTsKIFdFQkNPUkVfRVhQT1JUIGJvb2wgaXNUaGVTZWNyZXRTb2NpZXR5SGlkZGVuTXlzdGVyeSgp OwogCiB9IC8vIElPU0FwcGxpY2F0aW9uCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9wbGF0 Zm9ybS9SdW50aW1lQXBwbGljYXRpb25DaGVja3MubW0gYi9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9y bS9SdW50aW1lQXBwbGljYXRpb25DaGVja3MubW0KaW5kZXggZTYxYzYyZTU5Y2QxMWI5NDc3YTQ2 MTdmZGIxNTE3ZjRkOGU1ZmMzNC4uZGNhY2I4YzdiYTRiMmJiNmYxMDhmZThkYjNmNzNiYjVhZWRm YTkxOSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vUnVudGltZUFwcGxpY2F0 aW9uQ2hlY2tzLm1tCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL1J1bnRpbWVBcHBsaWNh dGlvbkNoZWNrcy5tbQpAQCAtMjM1LDI0ICsyMzUsNiBAQCBib29sIElPU0FwcGxpY2F0aW9uOjpp c0lCb29rcygpCiAgICAgcmV0dXJuIGlzSUJvb2tzOwogfQogCi1ib29sIElPU0FwcGxpY2F0aW9u Ojppc0Vjb2JlZSgpCi17Ci0gICAgc3RhdGljIGJvb2wgaXNFY29iZWUgPSBhcHBsaWNhdGlvbkJ1 bmRsZUlzRXF1YWxUbygiY29tLmVjb2JlZS5hdGhlbmFtb2JpbGUiKTsKLSAgICByZXR1cm4gaXNF Y29iZWU7Ci19Ci0KLWJvb2wgSU9TQXBwbGljYXRpb246OmlzUXVvcmEoKQotewotICAgIHN0YXRp YyBib29sIGlzUXVvcmEgPSBhcHBsaWNhdGlvbkJ1bmRsZUlzRXF1YWxUbygiY29tLnF1b3JhLmFw cC5tb2JpbGUiKTsKLSAgICByZXR1cm4gaXNRdW9yYTsKLX0KLQotYm9vbCBJT1NBcHBsaWNhdGlv bjo6aXNYdHJhTWF0aCgpCi17Ci0gICAgc3RhdGljIGJvb2wgaXNYdHJhTWF0aCA9IGFwcGxpY2F0 aW9uQnVuZGxlSXNFcXVhbFRvKCJvcmcueHRyYW1hdGgubWF0aGZhY3RzIik7Ci0gICAgcmV0dXJu IGlzWHRyYU1hdGg7Ci19Ci0KIGJvb2wgSU9TQXBwbGljYXRpb246OmlzVGhlU2VjcmV0U29jaWV0 eUhpZGRlbk15c3RlcnkoKQogewogICAgIHN0YXRpYyBib29sIGlzVGhlU2VjcmV0U29jaWV0eUhp ZGRlbk15c3RlcnkgPSBhcHBsaWNhdGlvbkJ1bmRsZUlzRXF1YWxUbygiY29tLmc1ZS5zZWNyZXRz b2NpZXR5Iik7CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L21hYy9XZWJWaWV3L1dlYlZpZXcu bW0gYi9Tb3VyY2UvV2ViS2l0L21hYy9XZWJWaWV3L1dlYlZpZXcubW0KaW5kZXggOWJiNjAyZjJj MjBhNjBlN2ZhMDhmZDVlYzhjNzY5ZmE0NTc4ZGE3MC4uMWY2N2U0NTUyMzExY2I5OTM5MjZjNDhh ZTJkOTY0MWY1NDU5NGMxMSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdC9tYWMvV2ViVmlldy9X ZWJWaWV3Lm1tCisrKyBiL1NvdXJjZS9XZWJLaXQvbWFjL1dlYlZpZXcvV2ViVmlldy5tbQpAQCAt ODY5LDcgKzg2OSw3IEBAIHN0YXRpYyBib29sIHNob3VsZEFsbG93UGljdHVyZUluUGljdHVyZU1l ZGlhUGxheWJhY2soKQogc3RhdGljIGJvb2wgc2hvdWxkQWxsb3dDb250ZW50U2VjdXJpdHlQb2xp Y3lTb3VyY2VTdGFyVG9NYXRjaEFueVByb3RvY29sKCkKIHsKICNpZiBQTEFURk9STShJT1MpCi0g ICAgc3RhdGljIGJvb2wgc2hvdWxkQWxsb3dDb250ZW50U2VjdXJpdHlQb2xpY3lTb3VyY2VTdGFy VG9NYXRjaEFueVByb3RvY29sID0gKElPU0FwcGxpY2F0aW9uOjppc0Vjb2JlZSgpIHx8IElPU0Fw cGxpY2F0aW9uOjppc1F1b3JhKCkgfHwgSU9TQXBwbGljYXRpb246OmlzWHRyYU1hdGgoKSkgJiYg IVdlYktpdExpbmtlZE9uT3JBZnRlcihXRUJLSVRfRklSU1RfVkVSU0lPTl9XSVRIX0NPTlRFTlRf U0VDVVJJVFlfUE9MSUNZX1NPVVJDRV9TVEFSX1BST1RPQ09MX1JFU1RSSUNUSU9OKTsKKyAgICBz dGF0aWMgYm9vbCBzaG91bGRBbGxvd0NvbnRlbnRTZWN1cml0eVBvbGljeVNvdXJjZVN0YXJUb01h dGNoQW55UHJvdG9jb2wgPSAhV2ViS2l0TGlua2VkT25PckFmdGVyKFdFQktJVF9GSVJTVF9WRVJT SU9OX1dJVEhfQ09OVEVOVF9TRUNVUklUWV9QT0xJQ1lfU09VUkNFX1NUQVJfUFJPVE9DT0xfUkVT VFJJQ1RJT04pOwogICAgIHJldHVybiBzaG91bGRBbGxvd0NvbnRlbnRTZWN1cml0eVBvbGljeVNv dXJjZVN0YXJUb01hdGNoQW55UHJvdG9jb2w7CiAjZWxzZQogICAgIHJldHVybiBmYWxzZTsK