<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>165699</bug_id>
          
          <creation_ts>2016-12-09 16:20:08 -0800</creation_ts>
          <short_desc>Remove QuickLook scheme from the list of secure schemes</short_desc>
          <delta_ts>2016-12-09 18:04:19 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>WebKit Local Build</version>
          <rep_platform>iPhone / iPad</rep_platform>
          <op_sys>iOS 10</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Daniel Bates">dbates</reporter>
          <assigned_to name="Daniel Bates">dbates</assigned_to>
          <cc>aestes</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1258443</commentid>
    <comment_count>0</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-09 16:20:08 -0800</bug_when>
    <thetext>Following r207155 we no longer need to treat the QuickLook scheme as a secure scheme. For completeness, we added the QuickLook scheme to the list of secure schemes in the patch for bug #150145.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258447</commentid>
    <comment_count>1</comment_count>
      <attachid>296734</attachid>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-09 16:21:16 -0800</bug_when>
    <thetext>Created attachment 296734
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258448</commentid>
    <comment_count>2</comment_count>
      <attachid>296734</attachid>
    <who name="Andy Estes">aestes</who>
    <bug_when>2016-12-09 16:22:51 -0800</bug_when>
    <thetext>Comment on attachment 296734
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=296734&amp;action=review

&gt; Source/WebCore/ChangeLog:10
&gt; +        origin from which they were served. We added the QuickLooks scheme to the list of secure

QuickLook, not QuickLooks.

&gt; Source/WebCore/ChangeLog:12
&gt; +        QuickLooks document served over HTTPS. Now that we use a unique origin for QuickLook

Ditto.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258504</commentid>
    <comment_count>3</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-09 18:04:19 -0800</bug_when>
    <thetext>Committed r209641: &lt;http://trac.webkit.org/changeset/209641&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>296734</attachid>
            <date>2016-12-09 16:21:16 -0800</date>
            <delta_ts>2016-12-09 16:22:51 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-165699-20161209162033.patch</filename>
            <type>text/plain</type>
            <size>2075</size>
            <attacher name="Daniel Bates">dbates</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjA5NjIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>
<flag name="review"
          id="319138"
          type_id="1"
          status="+"
          setter="aestes"
    />
          </attachment>
      

    </bug>

</bugzilla>