<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>171774</bug_id>
          
          <creation_ts>2017-05-06 11:48:14 -0700</creation_ts>
          <short_desc>[macOS] com.macromedia.Flash Player ESR.plugin.sb is installed outside of PlugInSandboxProfiles</short_desc>
          <delta_ts>2017-05-09 13:18:45 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>WebKit Local Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=160753</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>mitz</reporter>
          <assigned_to name="Andy Estes">aestes</assigned_to>
          <cc>aestes</cc>
    
    <cc>ap</cc>
    
    <cc>bfulgham</cc>
    
    <cc>commit-queue</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1305594</commentid>
    <comment_count>0</comment_count>
    <who name="">mitz</who>
    <bug_when>2017-05-06 11:48:14 -0700</bug_when>
    <thetext>After &lt;https://trac.webkit.org/r204461&gt;, com.macromedia.Flash Player ESR.plugin.sb is installed directly under WebKit.framework/Resources. Other plug-in sandbox profiles are installed in WebKit.framework/Resources/PlugInSandboxProfiles. As far as I can tell from looking at the code in PluginSandboxProfile.mm, only the latter path gets searched for profiles.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1305595</commentid>
    <comment_count>1</comment_count>
    <who name="">mitz</who>
    <bug_when>2017-05-06 11:48:21 -0700</bug_when>
    <thetext>See also bug 160753.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1305956</commentid>
    <comment_count>2</comment_count>
      <attachid>309382</attachid>
    <who name="Andy Estes">aestes</who>
    <bug_when>2017-05-08 11:25:25 -0700</bug_when>
    <thetext>Created attachment 309382
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1306004</commentid>
    <comment_count>3</comment_count>
      <attachid>309382</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-05-08 12:57:24 -0700</bug_when>
    <thetext>Comment on attachment 309382
Patch

Clearing flags on attachment: 309382

Committed r216445: &lt;http://trac.webkit.org/changeset/216445&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1306005</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-05-08 12:57:25 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1306523</commentid>
    <comment_count>5</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2017-05-09 13:18:45 -0700</bug_when>
    <thetext>&lt;rdar://problem/32084018&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>309382</attachid>
            <date>2017-05-08 11:25:25 -0700</date>
            <delta_ts>2017-05-08 12:57:24 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-171774-20170508112523.patch</filename>
            <type>text/plain</type>
            <size>4756</size>
            <attacher name="Andy Estes">aestes</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjE2MTkyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0Mi9D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</data>

          </attachment>
      

    </bug>

</bugzilla>