218520 2020-11-03 09:35:17 -0800 [macOS] Update message filters in the WebContent sandbox 2020-11-05 13:41:07 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan webkit-unassigned bfulgham webkit-bug-importer oldest_to_newest 1704035 0 pvollan 2020-11-03 09:35:17 -0800 Based on telemetry, update the message filters with allowed messages in the WebContent sandbox. 1704036 1 webkit-bug-importer 2020-11-03 09:35:53 -0800 <rdar://problem/70998292> 1704040 2 413065 pvollan 2020-11-03 09:42:40 -0800 Created attachment 413065 Patch 1704998 3 413065 bfulgham 2020-11-05 13:28:24 -0800 Comment on attachment 413065 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=413065&action=review r=me, but please double check Msg 206. > Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:1227 > + 207 Does this mean message 206 was not needed? 1704999 4 pvollan 2020-11-05 13:30:21 -0800 (In reply to Brent Fulgham from comment #3) > Comment on attachment 413065 [details] > Patch > > View in context: > https://bugs.webkit.org/attachment.cgi?id=413065&action=review > > r=me, but please double check Msg 206. > > > Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:1227 > > + 207 > > Does this mean message 206 was not needed? According to telemetry, 206 is not needed. This was a copy from the iOS sandbox. Thanks for reviewing! 1705006 5 ews-feeder 2020-11-05 13:41:06 -0800 Committed r269474: <https://trac.webkit.org/changeset/269474> All reviewed patches have been landed. Closing bug and clearing flags on attachment 413065. 413065 2020-11-03 09:42:40 -0800 2020-11-05 13:41:07 -0800 Patch 218520.patch text/plain 5279 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNjkzMDkpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE2IEBACisyMDIwLTExLTAzICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFjT1NdIFVwZGF0ZSBtZXNz YWdlIGZpbHRlcnMgaW4gdGhlIFdlYkNvbnRlbnQgc2FuZGJveAorICAgICAgICBodHRwczovL2J1 Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjE4NTIwCisKKyAgICAgICAgUmV2aWV3ZWQg YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQmFzZWQgb24gdGVsZW1ldHJ5LCB1cGRhdGUg dGhlIG1lc3NhZ2UgZmlsdGVycyB3aXRoIGFsbG93ZWQgbWVzc2FnZXMgaW4gdGhlIFdlYkNvbnRl bnQgc2FuZGJveC4KKworICAgICAgICBObyBuZXcgdGVzdHMsIGNvdmVyZWQgYnkgZXhpc3Rpbmcg dGVzdHMuCisKKyAgICAgICAgKiBXZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9jZXNzLnNiLmlu OgorCiAyMDIwLTExLTAzICBCcmVudCBGdWxnaGFtICA8YmZ1bGdoYW1AYXBwbGUuY29tPgogCiAg ICAgICAgIFttYWNPU10gQWRvcHQgYWRkaXRpb25hbCBRdWFydHpDb3JlIGVudGl0bGVtZW50IHRv IHJlZHVjZSBhY2Nlc3NpYmxlIGVuZHBvaW50cyAKSW5kZXg6IFNvdXJjZS9XZWJLaXQvV2ViUHJv Y2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi S2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4JKHJldmlzaW9uIDI2OTMw NykKKysrIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5p bgkod29ya2luZyBjb3B5KQpAQCAtMTIyMiw3ICsxMjIyLDE0IEBACiAgICAgKGFsbG93IG1hY2gt Ym9vdHN0cmFwCiAgICAgICAgIChhcHBseS1tZXNzYWdlLWZpbHRlcgogICAgICAgICAgICAgKGFs bG93IHhwYy1tZXNzYWdlLXNlbmQgKHdpdGggdGVsZW1ldHJ5KSkKLSAgICAgICAgICAgIChhbGxv dyB4cGMtbWVzc2FnZS1zZW5kICh3aXRoIHRlbGVtZXRyeSkgKG1lc3NhZ2UtbnVtYmVyIDIwNikp CisgICAgICAgICAgICAoYWxsb3cgeHBjLW1lc3NhZ2Utc2VuZCAobWVzc2FnZS1udW1iZXIKKyAg ICAgICAgICAgICAgICAyMDQKKyAgICAgICAgICAgICAgICAyMDcKKyAgICAgICAgICAgICAgICAz MDEKKyAgICAgICAgICAgICAgICA4MDAKKyAgICAgICAgICAgICAgICA4MDQKKyAgICAgICAgICAg ICAgICApCisgICAgICAgICAgICApCiAgICAgICAgICkKICAgICApCiApCkBAIC0xMjMxLDYgKzEy MzgsNTkgQEAKICAgICAoYWxsb3cgbWFjaC1rZXJuZWwtZW5kcG9pbnQKICAgICAgICAgKGFwcGx5 LW1lc3NhZ2UtZmlsdGVyCiAgICAgICAgICAgICAoYWxsb3cgbWFjaC1tZXNzYWdlLXNlbmQgKHdp dGggdGVsZW1ldHJ5KSkKKyAgICAgICAgICAgIChhbGxvdyBtYWNoLW1lc3NhZ2Utc2VuZCAoa2Vy bmVsLW1pZy1yb3V0aW5lCisgICAgICAgICAgICAgICAgX21hY2hfbWFrZV9tZW1vcnlfZW50cnkK KyAgICAgICAgICAgICAgICBob3N0X2dldF9pb19tYXN0ZXIKKyAgICAgICAgICAgICAgICBob3N0 X2luZm8KKyAgICAgICAgICAgICAgICBob3N0X3JlcXVlc3Rfbm90aWZpY2F0aW9uCisgICAgICAg ICAgICAgICAgaW9fY29ubmVjdF9hZGRfY2xpZW50CisgICAgICAgICAgICAgICAgaW9fY29ubmVj dF9hc3luY19tZXRob2QKKyAgICAgICAgICAgICAgICBpb19jb25uZWN0X21hcF9tZW1vcnlfaW50 b190YXNrCisgICAgICAgICAgICAgICAgaW9fY29ubmVjdF9tZXRob2QKKyAgICAgICAgICAgICAg ICBpb19jb25uZWN0X21ldGhvZF92YXJfb3V0cHV0CisgICAgICAgICAgICAgICAgaW9fY29ubmVj dF9zZXRfbm90aWZpY2F0aW9uX3BvcnRfNjQKKyAgICAgICAgICAgICAgICBpb19pdGVyYXRvcl9p c192YWxpZAorICAgICAgICAgICAgICAgIGlvX2l0ZXJhdG9yX25leHQKKyAgICAgICAgICAgICAg ICBpb19vYmplY3RfY29uZm9ybXNfdG8KKyAgICAgICAgICAgICAgICBpb19yZWdpc3RyeV9jcmVh dGVfaXRlcmF0b3IKKyAgICAgICAgICAgICAgICBpb19yZWdpc3RyeV9lbnRyeV9jcmVhdGVfaXRl cmF0b3IKKyAgICAgICAgICAgICAgICBpb19yZWdpc3RyeV9lbnRyeV9mcm9tX3BhdGgKKyAgICAg ICAgICAgICAgICBpb19yZWdpc3RyeV9lbnRyeV9nZXRfY2hpbGRfaXRlcmF0b3IKKyAgICAgICAg ICAgICAgICBpb19yZWdpc3RyeV9lbnRyeV9nZXRfbmFtZQorICAgICAgICAgICAgICAgIGlvX3Jl Z2lzdHJ5X2VudHJ5X2dldF9uYW1lX2luX3BsYW5lCisgICAgICAgICAgICAgICAgaW9fcmVnaXN0 cnlfZW50cnlfZ2V0X3BhcmVudF9pdGVyYXRvcgorICAgICAgICAgICAgICAgIGlvX3JlZ2lzdHJ5 X2VudHJ5X2dldF9wcm9wZXJ0aWVzX2Jpbl9idWYKKyAgICAgICAgICAgICAgICBpb19yZWdpc3Ry eV9lbnRyeV9nZXRfcHJvcGVydHlfYmluX2J1ZgorICAgICAgICAgICAgICAgIGlvX3JlZ2lzdHJ5 X2VudHJ5X2dldF9yZWdpc3RyeV9lbnRyeV9pZAorICAgICAgICAgICAgICAgIGlvX3JlZ2lzdHJ5 X2dldF9yb290X2VudHJ5CisgICAgICAgICAgICAgICAgaW9fc2VydmVyX3ZlcnNpb24KKyAgICAg ICAgICAgICAgICBpb19zZXJ2aWNlX2FkZF9pbnRlcmVzdF9ub3RpZmljYXRpb25fNjQKKyAgICAg ICAgICAgICAgICBpb19zZXJ2aWNlX2FkZF9ub3RpZmljYXRpb25fYmluXzY0CisgICAgICAgICAg ICAgICAgaW9fc2VydmljZV9jbG9zZQorICAgICAgICAgICAgICAgIGlvX3NlcnZpY2VfZ2V0X21h dGNoaW5nX3NlcnZpY2VfYmluCisgICAgICAgICAgICAgICAgaW9fc2VydmljZV9nZXRfbWF0Y2hp bmdfc2VydmljZXNfYmluCisgICAgICAgICAgICAgICAgaW9fc2VydmljZV9vcGVuX2V4dGVuZGVk CisgICAgICAgICAgICAgICAgbWFjaF9wb3J0X2dldF9yZWZzCisgICAgICAgICAgICAgICAgbWFj aF9wb3J0X3NldF9hdHRyaWJ1dGVzCisgICAgICAgICAgICAgICAgbWFjaF92bV9jb3B5CisgICAg ICAgICAgICAgICAgbWFjaF92bV9tYXBfZXh0ZXJuYWwKKyAgICAgICAgICAgICAgICBtYWNoX3Zt X3JlZ2lvbgorICAgICAgICAgICAgICAgIG1hY2hfdm1fcmVtYXBfZXh0ZXJuYWwKKyAgICAgICAg ICAgICAgICBzZW1hcGhvcmVfY3JlYXRlCisgICAgICAgICAgICAgICAgc2VtYXBob3JlX2Rlc3Ry b3kKKyAgICAgICAgICAgICAgICB0YXNrX2dldF9zcGVjaWFsX3BvcnRfZnJvbV91c2VyCisgICAg ICAgICAgICAgICAgdGFza19pbmZvX2Zyb21fdXNlcgorICAgICAgICAgICAgICAgIHRhc2tfcG9s aWN5X3NldAorICAgICAgICAgICAgICAgIHRhc2tfcmVzdGFydGFibGVfcmFuZ2VzX3N5bmNocm9u aXplCisgICAgICAgICAgICAgICAgdGhyZWFkX2dldF9zdGF0ZV90b191c2VyCisgICAgICAgICAg ICAgICAgdGhyZWFkX2luZm8KKyAgICAgICAgICAgICAgICB0aHJlYWRfcG9saWN5CisgICAgICAg ICAgICAgICAgdGhyZWFkX3BvbGljeV9zZXQKKyAgICAgICAgICAgICAgICB0aHJlYWRfcmVzdW1l CisgICAgICAgICAgICAgICAgdGhyZWFkX3NldF9leGNlcHRpb25fcG9ydHMKKyAgICAgICAgICAg ICAgICB0aHJlYWRfc3VzcGVuZAorICAgICAgICAgICAgICAgICkKKyAgICAgICAgICAgICkKICAg ICAgICAgKQogICAgICkKICkKQEAgLTEyMzcsNCArMTI5NywzOCBAQAogCiAod2hlbiAoZGVmaW5l ZD8gJ3N5c2NhbGwtbWFjaCkKICAgICAoYWxsb3cgc3lzY2FsbC1tYWNoICh3aXRoIHRlbGVtZXRy eSkpCisgICAgKGFsbG93IHN5c2NhbGwtbWFjaCAobWFjaHRyYXAtbnVtYmVyCisgICAgICAgIE1T Q19fa2VybmVscnBjX21hY2hfcG9ydF9jb25zdHJ1Y3RfdHJhcAorICAgICAgICBNU0NfX2tlcm5l bHJwY19tYWNoX3BvcnRfZGVhbGxvY2F0ZV90cmFwCisgICAgICAgIE1TQ19fa2VybmVscnBjX21h Y2hfcG9ydF9kZXN0cnVjdF90cmFwCisgICAgICAgIE1TQ19fa2VybmVscnBjX21hY2hfcG9ydF9l eHRyYWN0X21lbWJlcl90cmFwCisgICAgICAgIE1TQ19fa2VybmVscnBjX21hY2hfcG9ydF9ndWFy ZF90cmFwCisgICAgICAgIE1TQ19fa2VybmVscnBjX21hY2hfcG9ydF9pbnNlcnRfbWVtYmVyX3Ry YXAKKyAgICAgICAgTVNDX19rZXJuZWxycGNfbWFjaF9wb3J0X2luc2VydF9yaWdodF90cmFwCisg ICAgICAgIE1TQ19fa2VybmVscnBjX21hY2hfcG9ydF9tb2RfcmVmc190cmFwCisgICAgICAgIE1T Q19fa2VybmVscnBjX21hY2hfcG9ydF9yZXF1ZXN0X25vdGlmaWNhdGlvbl90cmFwCisgICAgICAg IE1TQ19fa2VybmVscnBjX21hY2hfcG9ydF90eXBlX3RyYXAKKyAgICAgICAgTVNDX19rZXJuZWxy cGNfbWFjaF92bV9hbGxvY2F0ZV90cmFwCisgICAgICAgIE1TQ19fa2VybmVscnBjX21hY2hfdm1f ZGVhbGxvY2F0ZV90cmFwCisgICAgICAgIE1TQ19fa2VybmVscnBjX21hY2hfdm1fbWFwX3RyYXAK KyAgICAgICAgTVNDX19rZXJuZWxycGNfbWFjaF92bV9wcm90ZWN0X3RyYXAKKyAgICAgICAgTVND X19rZXJuZWxycGNfbWFjaF92bV9wdXJnYWJsZV9jb250cm9sX3RyYXAKKyAgICAgICAgTVNDX2hv c3RfY3JlYXRlX21hY2hfdm91Y2hlcl90cmFwCisgICAgICAgIE1TQ19ob3N0X3NlbGZfdHJhcAor ICAgICAgICBNU0NfbWFjaF9nZW5lcmF0ZV9hY3Rpdml0eV9pZAorICAgICAgICBNU0NfbWFjaF9t c2dfdHJhcAorICAgICAgICBNU0NfbWFjaF9yZXBseV9wb3J0CisgICAgICAgIE1TQ19tYWNoX3Zv dWNoZXJfZXh0cmFjdF9hdHRyX3JlY2lwZV90cmFwCisgICAgICAgIE1TQ19ta190aW1lcl9hcm0K KyAgICAgICAgTVNDX21rX3RpbWVyX2NhbmNlbAorICAgICAgICBNU0NfbWtfdGltZXJfY3JlYXRl CisgICAgICAgIE1TQ19waWRfZm9yX3Rhc2sKKyAgICAgICAgTVNDX3NlbWFwaG9yZV9zaWduYWxf dHJhcAorICAgICAgICBNU0Nfc2VtYXBob3JlX3RpbWVkd2FpdF90cmFwCisgICAgICAgIE1TQ19z ZW1hcGhvcmVfd2FpdF90cmFwCisgICAgICAgIE1TQ19zeXNjYWxsX3RocmVhZF9zd2l0Y2gKKyAg ICAgICAgTVNDX3Rhc2tfbmFtZV9mb3JfcGlkCisgICAgICAgIE1TQ190aHJlYWRfZ2V0X3NwZWNp YWxfcmVwbHlfcG9ydAorICAgICAgICApCisgICAgKQogKQo=