197299 2019-04-25 15:44:37 -0700 Trying to load a main resource outside the sandbox should not crash the WebContent process 2019-04-25 17:17:31 -0700 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 cdumez cdumez achristensen beidson commit-queue ggaren webkit-bug-importer oldest_to_newest 1530552 0 cdumez 2019-04-25 15:44:37 -0700 Trying to load a main resource outside the sandbox should not crash the WebContent process. We should simply ignore the load and log an error message. 1530553 1 cdumez 2019-04-25 15:44:54 -0700 <rdar://problem/49808042> 1530554 2 368279 cdumez 2019-04-25 15:46:18 -0700 Created attachment 368279 Patch 1530568 3 368279 ggaren 2019-04-25 16:31:32 -0700 Comment on attachment 368279 Patch r=me Can we API test this? 1530573 4 cdumez 2019-04-25 16:40:02 -0700 (In reply to Geoffrey Garen from comment #3) > Comment on attachment 368279 [details] > Patch > > r=me > > Can we API test this? Last I checked, our API test runner was not sandboxed. Do you believe this has changed? 1530575 5 cdumez 2019-04-25 16:40:47 -0700 (In reply to Chris Dumez from comment #4) > (In reply to Geoffrey Garen from comment #3) > > Comment on attachment 368279 [details] > > Patch > > > > r=me > > > > Can we API test this? > > Last I checked, our API test runner was not sandboxed. Do you believe this > has changed? According to rdar://problem/42638129 which I filed a while back, this has not been fixed yet. 1530582 6 368279 commit-queue 2019-04-25 17:17:28 -0700 Comment on attachment 368279 Patch Clearing flags on attachment: 368279 Committed r244670: <https://trac.webkit.org/changeset/244670> 1530583 7 commit-queue 2019-04-25 17:17:31 -0700 All reviewed patches have been landed. Closing bug. 368279 2019-04-25 15:46:18 -0700 2019-04-25 17:17:28 -0700 Patch bug-197299-20190425154618.patch text/plain 1922 cdumez U3VidmVyc2lvbiBSZXZpc2lvbjogMjQ0NjQ1CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGUzMmViNDllNjIwNzI0MDU1 MTBiODk1MjBmYmVmYzcwMTNlMGY3Y2YuLjA3MzEyNThmZWNmNGVlZjMzZjdmY2RjYWE3MGVjZjc1 NzhiZmYyY2IgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcgQEAKKzIwMTktMDQtMjUgIENocmlzIER1 bWV6ICA8Y2R1bWV6QGFwcGxlLmNvbT4KKworICAgICAgICBUcnlpbmcgdG8gbG9hZCBhIG1haW4g cmVzb3VyY2Ugb3V0c2lkZSB0aGUgc2FuZGJveCBzaG91bGQgbm90IGNyYXNoIHRoZSBXZWJDb250 ZW50IHByb2Nlc3MKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dp P2lkPTE5NzI5OQorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNDk4MDgwNDI+CisKKyAgICAgICAg UmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgVHJ5aW5nIHRvIGxvYWQgYSBt YWluIHJlc291cmNlIG91dHNpZGUgdGhlIHNhbmRib3ggc2hvdWxkIG5vdCBjcmFzaCB0aGUgV2Vi Q29udGVudCBwcm9jZXNzLiBXZSBzaG91bGQKKyAgICAgICAgc2ltcGx5IGlnbm9yZSB0aGUgbG9h ZCBhbmQgbG9nIGFuIGVycm9yIG1lc3NhZ2UuCisKKyAgICAgICAgKiBVSVByb2Nlc3MvV2ViUGFn ZVByb3h5LmNwcDoKKyAgICAgICAgKFdlYktpdDo6V2ViUGFnZVByb3h5OjpkZWNpZGVQb2xpY3lG b3JOYXZpZ2F0aW9uQWN0aW9uKToKKwogMjAxOS0wNC0yNSAgWW91ZW5uIEZhYmxldCAgPHlvdWVu bkBhcHBsZS5jb20+CiAKICAgICAgICAgW01hYyBpT1MgV0syXSBMYXlvdXQgVGVzdCBodHRwL3dw dC9jYWNoZS1zdG9yYWdlL2NhY2hlLXF1b3RhLWFmdGVyLXJlc3RhcnQuYW55Lmh0bWwgaXMgYSBm bGFreSBmYWlsdXJlCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L1VJUHJvY2Vzcy9XZWJQYWdl UHJveHkuY3BwIGIvU291cmNlL1dlYktpdC9VSVByb2Nlc3MvV2ViUGFnZVByb3h5LmNwcAppbmRl eCAxMzU0ZjljYjhjZjJiOTA5ZmE3ODZhZGM2ODcyZDNkMzkxZGFlYzJiLi4zZDJjOWUxNzA3ODI0 ZjA1OGY4NzNkN2E5MWE0MzUyOWRhZGU3ODQ2IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0L1VJ UHJvY2Vzcy9XZWJQYWdlUHJveHkuY3BwCisrKyBiL1NvdXJjZS9XZWJLaXQvVUlQcm9jZXNzL1dl YlBhZ2VQcm94eS5jcHAKQEAgLTQ1NDEsNyArNDU0MSwxMiBAQCB2b2lkIFdlYlBhZ2VQcm94eTo6 ZGVjaWRlUG9saWN5Rm9yTmF2aWdhdGlvbkFjdGlvbihSZWY8V2ViUHJvY2Vzc1Byb3h5PiYmIHBy b2NlcwogICAgIGlmICghZnJvbUFQSSkKICAgICAgICAgbV9wYWdlTG9hZFN0YXRlLmNsZWFyUGVu ZGluZ0FQSVJlcXVlc3RVUkwodHJhbnNhY3Rpb24pOwogCi0gICAgTUVTU0FHRV9DSEVDS19VUkwo cHJvY2VzcywgcmVxdWVzdC51cmwoKSk7CisgICAgaWYgKCFjaGVja1VSTFJlY2VpdmVkRnJvbUN1 cnJlbnRPclByZXZpb3VzV2ViUHJvY2Vzcyhwcm9jZXNzLCByZXF1ZXN0LnVybCgpKSkgeworICAg ICAgICBSRUxFQVNFX0xPR19FUlJPUl9JRl9BTExPV0VEKFByb2Nlc3MsICJJZ25vcmluZyByZXF1 ZXN0IHRvIGxvYWQgdGhpcyBtYWluIHJlc291cmNlIGJlY2F1c2UgaXQgaXMgb3V0c2lkZSB0aGUg c2FuZGJveCIpOworICAgICAgICBzZW5kZXItPnNlbmQoUG9saWN5QWN0aW9uOjpJZ25vcmUsIDAs IERvd25sb2FkSUQoKSwgV1RGOjpudWxsb3B0KTsKKyAgICAgICAgcmV0dXJuOworICAgIH0KKwog ICAgIE1FU1NBR0VfQ0hFQ0tfVVJMKHByb2Nlc3MsIG9yaWdpbmFsUmVxdWVzdC51cmwoKSk7CiAK ICAgICBSZWZQdHI8QVBJOjpOYXZpZ2F0aW9uPiBuYXZpZ2F0aW9uOwo=