Bug 179689

Summary:

Remove access to "com.apple.pbs.fetch_services" from WebContent sandbox

Product:

WebKit

Reporter:

Brent Fulgham <bfulgham>

Component:

WebKit2

Assignee:

Brent Fulgham <bfulgham>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

achristensen, bfulgham, dino, ggaren, pvollan

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	pvollan: review+

Brent Fulgham

Reported 2017-11-14 13:17:03 PST

We shouldn't need access to fetch_services inside the WebContent sandbox.

Attachments
Patch (1.49 KB, patch) 2017-11-14 13:23 PST, Brent Fulgham	pvollan: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Brent Fulgham

Comment 1 2017-11-14 13:17:16 PST

Brent Fulgham

Comment 2 2017-11-14 13:23:41 PST

Per Arne Vollan

Comment 3 2017-11-15 08:56:42 PST

Comment on attachment 326915 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=326915&action=review R=me. > Source/WebKit/ChangeLog:10 > + API exposed to the system. These interactions (if needed) shoud be happening in the UIProcess, 'shoud' -> 'should'

Brent Fulgham

Comment 4 2017-11-15 08:58:18 PST

Comment on attachment 326915 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=326915&action=review >> Source/WebKit/ChangeLog:10 >> + API exposed to the system. These interactions (if needed) shoud be happening in the UIProcess, > > 'shoud' -> 'should' Doh! Thank you for catching that.

Brent Fulgham

Comment 5 2017-11-15 08:59:54 PST

Note You need to log in before you can comment on or make changes to this bug.