226044 2021-05-20 14:39:27 -0700 [Cocoa] Adopt "com.apple.QuartzCore.webkit-limited-types" entitlement 2021-05-20 16:03:21 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham pvollan webkit-bug-importer oldest_to_newest 1762145 0 bfulgham 2021-05-20 14:39:27 -0700 WebKit should adopt the "com.apple.QuartzCore.webkit-limited-types" entitlement as a further hardening measure to help QuartzCore limit the features accessible from the WebContent and GPU Process. WebKit only needs a small portion of the features of QuartzCore, and this entitlement allows the framework to block certain code paths. 1762147 1 bfulgham 2021-05-20 14:40:45 -0700 <rdar://problem/60549120> 1762149 2 429224 bfulgham 2021-05-20 14:42:05 -0700 Created attachment 429224 Patch 1762162 3 429224 pvollan 2021-05-20 15:04:39 -0700 Comment on attachment 429224 Patch R=me. 1762190 4 ews-feeder 2021-05-20 16:03:20 -0700 Committed r277834 (237978@main): <https://commits.webkit.org/237978@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 429224. 429224 2021-05-20 14:42:05 -0700 2021-05-20 16:03:21 -0700 Patch bug-226044-20210520144204.patch text/plain 4224 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjc3ODIyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IDczYjQ5MjY4NTE0YWU0OWNi ZTlhNjlhODc3YzRiNzkyOTcwODc4NGUuLmViOTk2OTllYmI5NzFjZDczMzMwMDY4YTliMzZmOTQw ODM2MTllOTYgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTkgQEAKKzIwMjEtMDUtMjAgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW0NvY29hXSBBZG9wdCAiY29t LmFwcGxlLlF1YXJ0ekNvcmUud2Via2l0LWxpbWl0ZWQtdHlwZXMiIGVudGl0bGVtZW50CisgICAg ICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMjYwNDQKKyAgICAg ICAgPHJkYXI6Ly9wcm9ibGVtLzYwNTQ5MTIwPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E WSAoT09QUyEpLgorCisgICAgICAgIFdlYktpdCBzaG91bGQgYWRvcHQgdGhlICJjb20uYXBwbGUu UXVhcnR6Q29yZS53ZWJraXQtbGltaXRlZC10eXBlcyIgZW50aXRsZW1lbnQgYXMgYSBmdXJ0aGVy IGhhcmRlbmluZyBtZWFzdXJlIHRvIGhlbHAKKyAgICAgICAgUXVhcnR6Q29yZSBsaW1pdCB0aGUg ZmVhdHVyZXMgYWNjZXNzaWJsZSBmcm9tIHRoZSBXZWJDb250ZW50IGFuZCBHUFUgUHJvY2Vzcy4g V2ViS2l0IG9ubHkgbmVlZHMgYSBzdWJzZXQgb2YgdGhlCisgICAgICAgIGZlYXR1cmVzIG9mIFF1 YXJ0ekNvcmUsIGFuZCB0aGlzIGVudGl0bGVtZW50IGFsbG93cyB0aGUgZnJhbWV3b3JrIHRvIGJs b2NrIGNlcnRhaW4gY29kZSBwYXRocy4KKworICAgICAgICBUZXN0ZWQgYnkgZXhpc3RpbmcgcmVu ZGVyaW5nIHRlc3QgY2FzZXMuCisKKyAgICAgICAgKiBTY3JpcHRzL3Byb2Nlc3MtZW50aXRsZW1l bnRzLnNoOgorCiAyMDIxLTA1LTIwICBCcmVudCBGdWxnaGFtICA8YmZ1bGdoYW1AYXBwbGUuY29t PgogCiAgICAgICAgIFttYWNPU10gQWxsb3cgYWNjZXNzIHRvIHRoZSAnRGlza0ltYWdlVVJMJyBJ T0tpdCBwcm9wZXJ0eQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9TY3JpcHRzL3Byb2Nlc3Mt ZW50aXRsZW1lbnRzLnNoIGIvU291cmNlL1dlYktpdC9TY3JpcHRzL3Byb2Nlc3MtZW50aXRsZW1l bnRzLnNoCmluZGV4IDU3Zjk2YjlkZjVjODMwN2I5MWYxMDZlMTZjNzg2MzRiMzY5YjEzYTYuLmY0 MzYzOWUwZjY4NGMyNzZkNmZkYzYyNmM5Y2VlZDgzNjczZmZmY2UgMTAwNzU1Ci0tLSBhL1NvdXJj ZS9XZWJLaXQvU2NyaXB0cy9wcm9jZXNzLWVudGl0bGVtZW50cy5zaAorKysgYi9Tb3VyY2UvV2Vi S2l0L1NjcmlwdHMvcHJvY2Vzcy1lbnRpdGxlbWVudHMuc2gKQEAgLTI1LDYgKzI1LDcgQEAgZnVu Y3Rpb24gbWFjX3Byb2Nlc3Nfd2ViY29udGVudF9lbnRpdGxlbWVudHMoKQogICAgICAgICAgICAg cGxpc3RidWRkeSBBZGQgOmNvbS5hcHBsZS5wcml2YXRlLnBhYy5leGNlcHRpb24gYm9vbCBZRVMK ICAgICAgICAgICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucHJpdmF0ZS5zZWN1cml0eS5t ZXNzYWdlLWZpbHRlciBib29sIFlFUwogICAgICAgICAgICAgcGxpc3RidWRkeSBBZGQgOmNvbS5h cHBsZS5hdmZvdW5kYXRpb24uYWxsb3ctc3lzdGVtLXdpZGUtY29udGV4dCBib29sIFlFUworICAg ICAgICAgICAgcGxpc3RidWRkeSBhZGQgOmNvbS5hcHBsZS5RdWFydHpDb3JlLndlYmtpdC1saW1p dGVkLXR5cGVzIGJvb2wgWUVTCiAgICAgICAgIGZpCiAgICAgICAgIGlmICgoICIke1RBUkdFVF9N QUNfT1NfWF9WRVJTSU9OX01BSk9SfSIgPj0gMTIwMDAwICkpCiAgICAgICAgIHRoZW4KQEAgLTQ5 LDYgKzUwLDcgQEAgZnVuY3Rpb24gbWFjX3Byb2Nlc3NfZ3B1X2VudGl0bGVtZW50cygpCiAgICAg ICAgIHRoZW4KICAgICAgICAgICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUuZGV2ZWxvcGVy LnZpZGVvdG9vbGJveC5jbGllbnQtc2FuZGJveGVkLWRlY29kZXIgYm9vbCBZRVMKICAgICAgICAg ICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUuYXZmb3VuZGF0aW9uLmFsbG93LXN5c3RlbS13 aWRlLWNvbnRleHQgYm9vbCBZRVMKKyAgICAgICAgICAgIHBsaXN0YnVkZHkgYWRkIDpjb20uYXBw bGUuUXVhcnR6Q29yZS53ZWJraXQtbGltaXRlZC10eXBlcyBib29sIFlFUwogICAgICAgICBmaQog CiAgICAgICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucHJpdmF0ZS5tZW1vcnkub3duZXJz aGlwX3RyYW5zZmVyIGJvb2wgWUVTCkBAIC0xNjAsNiArMTYyLDcgQEAgZnVuY3Rpb24gbWFjY2F0 YWx5c3RfcHJvY2Vzc193ZWJjb250ZW50X2VudGl0bGVtZW50cygpCiAgICAgICAgIHBsaXN0YnVk ZHkgQWRkIDpjb20uYXBwbGUucHJpdmF0ZS5wYWMuZXhjZXB0aW9uIGJvb2wgWUVTCiAgICAgICAg IHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucHJpdmF0ZS5zZWN1cml0eS5tZXNzYWdlLWZpbHRl ciBib29sIFlFUwogICAgICAgICBwbGlzdGJ1ZGR5IEFkZCA6Y29tLmFwcGxlLlVJS2l0LnZpZXct c2VydmljZS13YW50cy1jdXN0b20taWRpb20tYW5kLXNjYWxlIGJvb2wgWUVTCisgICAgICAgIHBs aXN0YnVkZHkgYWRkIDpjb20uYXBwbGUuUXVhcnR6Q29yZS53ZWJraXQtbGltaXRlZC10eXBlcyBi b29sIFlFUwogICAgIGZpCiAgICAgaWYgKCggIiR7VEFSR0VUX01BQ19PU19YX1ZFUlNJT05fTUFK T1J9IiA+PSAxMjAwMDAgKSkKICAgICB0aGVuCkBAIC0xNzMsNiArMTc2LDcgQEAgZnVuY3Rpb24g bWFjY2F0YWx5c3RfcHJvY2Vzc19ncHVfZW50aXRsZW1lbnRzKCkKICAgICBwbGlzdGJ1ZGR5IEFk ZCA6Y29tLmFwcGxlLnJ1bm5pbmdib2FyZC5hc3NlcnRpb25zLndlYmtpdCBib29sIFlFUwogICAg IHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUuUXVhcnR6Q29yZS53ZWJraXQtZW5kLXBvaW50cyBi b29sIFlFUwogICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucHJpdmF0ZS5tZW1vcnkub3du ZXJzaGlwX3RyYW5zZmVyIGJvb2wgWUVTCisgICAgcGxpc3RidWRkeSBhZGQgOmNvbS5hcHBsZS5R dWFydHpDb3JlLndlYmtpdC1saW1pdGVkLXR5cGVzIGJvb2wgWUVTCiB9CiAKIGZ1bmN0aW9uIG1h Y2NhdGFseXN0X3Byb2Nlc3NfbmV0d29ya19lbnRpdGxlbWVudHMoKQpAQCAtMjA4LDYgKzIxMiw3 IEBAIGZ1bmN0aW9uIGlvc19mYW1pbHlfcHJvY2Vzc193ZWJjb250ZW50X2VudGl0bGVtZW50cygp CiB7CiAgICAgcGxpc3RidWRkeSBBZGQgOmNvbS5hcHBsZS5RdWFydHpDb3JlLnNlY3VyZS1tb2Rl IGJvb2wgWUVTCiAgICAgcGxpc3RidWRkeSBBZGQgOmNvbS5hcHBsZS5RdWFydHpDb3JlLndlYmtp dC1lbmQtcG9pbnRzIGJvb2wgWUVTCisgICAgcGxpc3RidWRkeSBhZGQgOmNvbS5hcHBsZS5RdWFy dHpDb3JlLndlYmtpdC1saW1pdGVkLXR5cGVzIGJvb2wgWUVTCiAgICAgcGxpc3RidWRkeSBBZGQg OmNvbS5hcHBsZS5kZXZlbG9wZXIuY29yZW1lZGlhLmFsbG93LWFsdGVybmF0ZS12aWRlby1kZWNv ZGVyLXNlbGVjdGlvbiBib29sIFlFUwogICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUubWVk aWFyZW1vdGUuc2V0LXBsYXliYWNrLXN0YXRlIGJvb2wgWUVTCiAgICAgcGxpc3RidWRkeSBBZGQg OmNvbS5hcHBsZS5wYWMuc2hhcmVkX3JlZ2lvbl9pZCBzdHJpbmcgV2ViQ29udGVudApAQCAtMjM3 LDYgKzI0Miw3IEBAIGZ1bmN0aW9uIGlvc19mYW1pbHlfcHJvY2Vzc19ncHVfZW50aXRsZW1lbnRz KCkKIHsKICAgICBwbGlzdGJ1ZGR5IEFkZCA6Y29tLmFwcGxlLlF1YXJ0ekNvcmUuc2VjdXJlLW1v ZGUgYm9vbCBZRVMKICAgICBwbGlzdGJ1ZGR5IEFkZCA6Y29tLmFwcGxlLlF1YXJ0ekNvcmUud2Vi a2l0LWVuZC1wb2ludHMgYm9vbCBZRVMKKyAgICBwbGlzdGJ1ZGR5IGFkZCA6Y29tLmFwcGxlLlF1 YXJ0ekNvcmUud2Via2l0LWxpbWl0ZWQtdHlwZXMgYm9vbCBZRVMKICAgICBwbGlzdGJ1ZGR5IEFk ZCA6Y29tLmFwcGxlLmRldmVsb3Blci5jb3JlbWVkaWEuYWxsb3ctYWx0ZXJuYXRlLXZpZGVvLWRl Y29kZXItc2VsZWN0aW9uIGJvb2wgWUVTCiAgICAgcGxpc3RidWRkeSBBZGQgOmNvbS5hcHBsZS5t ZWRpYXJlbW90ZS5zZXQtcGxheWJhY2stc3RhdGUgYm9vbCBZRVMKICAgICBwbGlzdGJ1ZGR5IEFk ZCA6Y29tLmFwcGxlLnByaXZhdGUuYWxsb3ctZXhwbGljaXQtZ3JhcGhpY3MtcHJpb3JpdHkgYm9v bCBZRVMK