209324 2020-03-19 18:59:57 -0700 [macoOS] Remove access to 'apple-extension-services' from the WebContent sandbox 2020-03-19 20:05:57 -0700 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham pvollan webkit-bug-importer oldest_to_newest 1631953 0 bfulgham 2020-03-19 18:59:57 -0700 Analysis and review of telemetry show that the last users of 'apple-extension-services' in the WebContent process have been removed. We should now block access from the WebContent process. 1631955 1 bfulgham 2020-03-19 19:01:09 -0700 <rdar://problem/58089661> 1631956 2 394055 bfulgham 2020-03-19 19:02:12 -0700 Created attachment 394055 Patch 1631959 3 394055 pvollan 2020-03-19 19:17:40 -0700 Comment on attachment 394055 Patch R=me. 1631970 4 ews-feeder 2020-03-19 20:05:57 -0700 Committed r258750: <https://trac.webkit.org/changeset/258750> All reviewed patches have been landed. Closing bug and clearing flags on attachment 394055. 394055 2020-03-19 19:02:12 -0700 2020-03-19 20:05:57 -0700 Patch bug-209324-20200319190211.patch text/plain 3159 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjU4NzQ3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGRiNDA4Yzc0Y2YzMTM4YTg0 ZGZiM2EyNmFmZTllNjBmNTY5NGEyZmUuLmZiOThlYmU2OWZlODE5YWJmMzQxNWNiZjZlMTdjNWJh MmUzOGEzZGEgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcgQEAKKzIwMjAtMDMtMTkgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW21hY29PU10gUmVtb3ZlIGFj Y2VzcyB0byAnYXBwbGUtZXh0ZW5zaW9uLXNlcnZpY2VzJyBmcm9tIHRoZSBXZWJDb250ZW50IHNh bmRib3gKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIw OTMyNAorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNTgwODk2NjE+CisKKyAgICAgICAgUmV2aWV3 ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgUmVtb3ZlIHRoZSBsYXN0IG9mIHBlcm1p c3Npb25zIGZvciB0aGUgdW51c2VkICdhcHBsZS1leHRlbnNpb24tc2VydmljZXMnIG1hY2ggc2Vy dmljZS4KKworICAgICAgICAqIEdQVVByb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuR1BVUHJv Y2Vzcy5zYi5pbjoKKyAgICAgICAgKiBSZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20u YXBwbGUuV2ViS2l0LkdQVS5zYjoKKyAgICAgICAgKiBXZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQ cm9jZXNzLnNiLmluOgorCiAyMDIwLTAzLTE5ICBBbGV4IENocmlzdGVuc2VuICA8YWNocmlzdGVu c2VuQHdlYmtpdC5vcmc+CiAKICAgICAgICAgU2FuaXRpemUgc3VnZ2VzdGVkIGRvd25sb2FkIGZp bGVuYW1lIHJlY2VpdmVkIGZyb20gd2ViIHByb2Nlc3MKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJL aXQvR1BVUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5HUFVQcm9jZXNzLnNiLmluIGIvU291 cmNlL1dlYktpdC9HUFVQcm9jZXNzL21hYy9jb20uYXBwbGUuV2ViS2l0LkdQVVByb2Nlc3Muc2Iu aW4KaW5kZXggNTVkNmQ5ZTI0MGMzNzYyZjc3MWE1NDQwOGYxOTg3NDBmOTViZDk1YS4uNGFhZjU1 NjFkMjhmYmEyYmM1Mjg0ZDBlZmUxZmQ0ODhhNjlhZDExMyAxMDA2NDQKLS0tIGEvU291cmNlL1dl YktpdC9HUFVQcm9jZXNzL21hYy9jb20uYXBwbGUuV2ViS2l0LkdQVVByb2Nlc3Muc2IuaW4KKysr IGIvU291cmNlL1dlYktpdC9HUFVQcm9jZXNzL21hYy9jb20uYXBwbGUuV2ViS2l0LkdQVVByb2Nl c3Muc2IuaW4KQEAgLTM5OSw3ICszOTksNiBAQAogICAgICh4cGMtc2VydmljZS1uYW1lICJjb20u YXBwbGUuYXVkaW8uU2FuZGJveEhlbHBlciIpCiAgICAgKHhwYy1zZXJ2aWNlLW5hbWUgImNvbS5h cHBsZS5jb3JlbWVkaWEudmlkZW9kZWNvZGVyIikKICAgICAoeHBjLXNlcnZpY2UtbmFtZSAiY29t LmFwcGxlLmNvcmVtZWRpYS52aWRlb2VuY29kZXIiKQotICAgICh4cGMtc2VydmljZS1uYW1lLXJl Z2V4ICMiXC5hcHBsZS1leHRlbnNpb24tc2VydmljZSQiKQogICAgICh4cGMtc2VydmljZS1uYW1l ICJjb20uYXBwbGUuaGlzZXJ2aWNlcy14cGNzZXJ2aWNlIikKICAgICAoeHBjLXNlcnZpY2UtbmFt ZSAiY29tLmFwcGxlLnByaW50Lm5vcm1hbGl6ZXJkIikKICkKZGlmZiAtLWdpdCBhL1NvdXJjZS9X ZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5HUFUu c2IgYi9Tb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBs ZS5XZWJLaXQuR1BVLnNiCmluZGV4IGRkNmU2OTVkM2ZhNTZkOWJhYjVkNmNkOTdlNTgyZWJiMTgz MGU5ZTcuLjQ5YTc4NDU5MzRlNWUxZWE3MDBiMjA2NDUyMmE5ZWRkZGQ4MmI2NzUgMTAwNjQ0Ci0t LSBhL1NvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxl LldlYktpdC5HUFUuc2IKKysrIGIvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2Zp bGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5zYgpAQCAtNDAxLDcgKzQwMSw2IEBACiAKICAg ICAoYWxsb3cgbWFjaC1sb29rdXAgKHdpdGggcmVwb3J0KSAod2l0aCB0ZWxlbWV0cnkpCiAgICAg ICAgIChnbG9iYWwtbmFtZS1yZWdleCAjIl5jb21cLmFwcGxlXC51aWtpdFwudmlld3NlcnZpY2Vc Li4rIikKLSAgICAgICAgKHhwYy1zZXJ2aWNlLW5hbWUtcmVnZXggIyJcLmFwcGxlLWV4dGVuc2lv bi1zZXJ2aWNlJCIpIDs7IDxyZGFyOi8vcHJvYmxlbS8xOTUyNTg4Nz4KICAgICAgICAgKHhwYy1z ZXJ2aWNlLW5hbWUtcmVnZXggIyJcLnZpZXdzZXJ2aWNlJCIpIDs7IDxyZGFyOi8vcHJvYmxlbS8z MTI1MjM3MT4KICAgICApCiAKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9j b20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbiBiL1NvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20u YXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgppbmRleCA5ZmM0OTA1ODA5ZGZhZDg1MTEzNjViZjRjYTQ0 MjBlMjY0NDYwYzAzLi5jODk2MGRkMjhjZDQwYWUyYjM2MTE4YTY0NTA3MGE0ZGU4YTVkZjY5IDEw MDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Mu c2IuaW4KKysrIGIvU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNz LnNiLmluCkBAIC00MDYsMTIgKzQwNiwxMSBAQAogICAgICh4cGMtc2VydmljZS1uYW1lICJjb20u YXBwbGUucHJpbnQubm9ybWFsaXplcmQiKQogKQogCisjaWYgX19NQUNfT1NfWF9WRVJTSU9OX01J Tl9SRVFVSVJFRCA8IDEwMTYwMAogKGFsbG93IG1hY2gtbG9va3VwCi0jaWYgX19NQUNfT1NfWF9W RVJTSU9OX01JTl9SRVFVSVJFRCA+PSAxMDE1MDAKLSAgICAod2l0aCByZXBvcnQpICh3aXRoIHRl bGVtZXRyeSkKLSNlbmRpZgogICAgICh4cGMtc2VydmljZS1uYW1lLXJlZ2V4ICMiXC5hcHBsZS1l eHRlbnNpb24tc2VydmljZSQiKQogKQorI2VuZGlmCiAKIDs7IFV0aWxpdHkgZnVuY3Rpb25zIGZv ciBob21lIGRpcmVjdG9yeSByZWxhdGl2ZSBwYXRoIGZpbHRlcnMKIChkZWZpbmUgKGhvbWUtcmVn ZXggaG9tZS1yZWxhdGl2ZS1yZWdleCkK