179689 2017-11-14 13:17:03 -0800 Remove access to "com.apple.pbs.fetch_services" from WebContent sandbox 2017-11-15 08:59:54 -0800 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham achristensen bfulgham dino ggaren pvollan oldest_to_newest 1371540 0 bfulgham 2017-11-14 13:17:03 -0800 We shouldn't need access to fetch_services inside the WebContent sandbox. 1371541 1 bfulgham 2017-11-14 13:17:16 -0800 <rdar://problem/35369172> 1371542 2 326915 bfulgham 2017-11-14 13:23:41 -0800 Created attachment 326915 Patch 1371837 3 326915 pvollan 2017-11-15 08:56:42 -0800 Comment on attachment 326915 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=326915&action=review R=me. > Source/WebKit/ChangeLog:10 > + API exposed to the system. These interactions (if needed) shoud be happening in the UIProcess, 'shoud' -> 'should' 1371839 4 326915 bfulgham 2017-11-15 08:58:18 -0800 Comment on attachment 326915 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=326915&action=review >> Source/WebKit/ChangeLog:10 >> + API exposed to the system. These interactions (if needed) shoud be happening in the UIProcess, > > 'shoud' -> 'should' Doh! Thank you for catching that. 1371840 5 bfulgham 2017-11-15 08:59:54 -0800 Committed r224878: <https://trac.webkit.org/changeset/224878> 326915 2017-11-14 13:23:41 -0800 2017-11-15 08:56:42 -0800 Patch bug-179689-20171114132340.patch text/plain 1529 bfulgham SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyMjQ4MzgpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDE3LTExLTE0ICBCcmVudCBGdWxn aGFtICA8YmZ1bGdoYW1AYXBwbGUuY29tPgorCisgICAgICAgIFJlbW92ZSBhY2Nlc3MgdG8gImNv bS5hcHBsZS5wYnMuZmV0Y2hfc2VydmljZXMiIGZyb20gV2ViQ29udGVudCBzYW5kYm94CisgICAg ICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNzk2ODkKKyAgICAg ICAgPHJkYXI6Ly9wcm9ibGVtLzM1MzY5MTcyPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E WSAoT09QUyEpLgorCisgICAgICAgIFdlYktpdCdzIFdlYkNvbnRlbnQgcHJvY2VzcyBzaG91bGQg bm90IGhhdmUgYW55IG5lZWQgdG8gaW50ZXJhY3Qgd2l0aCB0aGUgZmV0Y2hfc2VydmljZXMKKyAg ICAgICAgQVBJIGV4cG9zZWQgdG8gdGhlIHN5c3RlbS4gVGhlc2UgaW50ZXJhY3Rpb25zIChpZiBu ZWVkZWQpIHNob3VkIGJlIGhhcHBlbmluZyBpbiB0aGUgVUlQcm9jZXNzLAorICAgICAgICBzbyB3 ZSBzaG91bGQgcHJldmVudCB0aGUgdW50cnVzdGVkIFdlYiBDb250ZW50IFByb2Nlc3MgZnJvbSBi ZWluZyBhYmxlIHRvIGNvbm5lY3QuCisKKyAgICAgICAgKiBXZWJQcm9jZXNzL2NvbS5hcHBsZS5X ZWJQcm9jZXNzLnNiLmluOgorCiAyMDE3LTExLTE0ICBCcmVudCBGdWxnaGFtICA8YmZ1bGdoYW1A YXBwbGUuY29tPgogCiAgICAgICAgIFdoaXRlbGlzdCBzb21lIElPS0l0IHByb3BlcnRpZXMgdG8g YXZvaWQgc2FuZGJveCB2aW9sYXRpb25zIG9uIFlvdVR1YmUKSW5kZXg6IFNvdXJjZS9XZWJLaXQv V2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3Vy Y2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4JKHJldmlzaW9u IDIyNDgzNykKKysrIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vz cy5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtNjUzLDkgKzY1Myw2IEBACiAgICAgICAgKGxpdGVy YWwgIi9wcml2YXRlL3Zhci9ydW4vbUROU1Jlc3BvbmRlciIpCiAgICAgICAgKHJlbW90ZSB0Y3Ap KQogCi0oYWxsb3cgbWFjaC1sb29rdXAKLSAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5w YnMuZmV0Y2hfc2VydmljZXMiKSkKLQogI2lmIF9fTUFDX09TX1hfVkVSU0lPTl9NSU5fUkVRVUlS RUQgPj0gMTAxMzAwCiA7OyBDRk5ldHdvcmsKIChhbGxvdyBmaWxlLXJlYWQtZGF0YSAocGF0aCAi L3ByaXZhdGUvdmFyL2RiL25zdXJsc3RvcmFnZWQvZGFmc2FEYXRhLmJpbiIpKQo=