276338 2024-07-08 13:53:59 -0700 [Cocoa] Recognize a second entitlement to allow non-Lockdown Mode processes to launch 2024-07-08 21:00:25 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Local Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham webkit-bug-importer oldest_to_newest 2045165 0 bfulgham 2024-07-08 13:53:59 -0700 Applications using `WKWebView` that have the `com.apple.developer.web-browser` entitlement can request that a particular page be loaded outside of Lockdown Mode. This allows users to bypass LDM on sites that don't work well under that restricted set of features. We would like to permit some system processes to launch a plain WKWebView in lockdown mode because of similar compatibility issues. We do not want to use the `web-browser` entitlement, since we do not want the other powerful features that entitlement grants. We are adding a managed entitlement to support this restricted use case: `com.apple.private.allow-ldm-exempt-webview` This patch recognizes this new entitlement as an alternative to `com.apple.developer.web-browser` for this specific case. <rdar://127464996> 2045168 1 bfulgham 2024-07-08 14:09:06 -0700 Pull request: https://github.com/WebKit/WebKit/pull/30579 2045242 2 ews-feeder 2024-07-08 21:00:23 -0700 Committed 280761@main (ee77044edb54): <https://commits.webkit.org/280761@main> Reviewed commits have been landed. Closing PR #30579 and removing active labels.