<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>182147</bug_id>
          
          <creation_ts>2018-01-25 14:08:27 -0800</creation_ts>
          <short_desc>[macOS] MiniBrowser isn’t app-sandboxed</short_desc>
          <delta_ts>2018-01-31 11:14:22 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Tools / Tests</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=182340</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>mitz</reporter>
          <assigned_to>mitz</assigned_to>
          <cc>ap</cc>
    
    <cc>bfulgham</cc>
    
    <cc>commit-queue</cc>
    
    <cc>lforschler</cc>
    
    <cc>sam</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>thorton</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1393269</commentid>
    <comment_count>0</comment_count>
    <who name="">mitz</who>
    <bug_when>2018-01-25 14:08:27 -0800</bug_when>
    <thetext>macOS MiniBrowser isn’t a sandboxed app.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1393278</commentid>
    <comment_count>1</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2018-01-25 14:14:21 -0800</bug_when>
    <thetext>This implies that it should be?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1393285</commentid>
    <comment_count>2</comment_count>
    <who name="">mitz</who>
    <bug_when>2018-01-25 14:21:51 -0800</bug_when>
    <thetext>(In reply to Simon Fraser (smfr) from comment #1)
&gt; This implies that it should be?

If possible. Perhaps it’s not practical for the only test app we have to be sandboxed. But even in that case, there should be some sandboxed test app—maybe it’s MiniBrowser (and there’s some other non-sandboxed app for when you need to test that), or maybe it’s a new app.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1393286</commentid>
    <comment_count>3</comment_count>
    <who name="Sam Weinig">sam</who>
    <bug_when>2018-01-25 14:22:02 -0800</bug_when>
    <thetext>Given that most (hopefully all) users of WKWebView are sandboxed apps, making MiniBrowser mimic that would useful in finding issues that affect them.

I do think we need to balance that with ensuring MiniBrowser is useful for it&apos;s debugging duties.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1394983</commentid>
    <comment_count>4</comment_count>
      <attachid>332760</attachid>
    <who name="">mitz</who>
    <bug_when>2018-01-31 07:13:40 -0800</bug_when>
    <thetext>Created attachment 332760
Enable App Sandbox with an exception allowing read access to all files</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1395074</commentid>
    <comment_count>5</comment_count>
      <attachid>332760</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-01-31 11:13:37 -0800</bug_when>
    <thetext>Comment on attachment 332760
Enable App Sandbox with an exception allowing read access to all files

Clearing flags on attachment: 332760

Committed r227908: &lt;https://trac.webkit.org/changeset/227908&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1395075</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-01-31 11:13:38 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1395077</commentid>
    <comment_count>7</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2018-01-31 11:14:22 -0800</bug_when>
    <thetext>&lt;rdar://problem/37078215&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>332760</attachid>
            <date>2018-01-31 07:13:40 -0800</date>
            <delta_ts>2018-01-31 11:13:37 -0800</delta_ts>
            <desc>Enable App Sandbox with an exception allowing read access to all files</desc>
            <filename>bug-182147-20180131071340.patch</filename>
            <type>text/plain</type>
            <size>4946</size>
            <attacher>mitz</attacher>
            
              <data encoding="base64">SW5kZXg6IFRvb2xzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>