Bug 185890

Summary: Close access to "lsopen" for non-UI process
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit2Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: achristensen, bfulgham, commit-queue, eric.carlson
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Brent Fulgham
Reported 2018-05-22 14:54:05 PDT
The WebContent, Network, and Storage processes should not have access to the LaunchServices 'openURL' feature, since opening URL's is the responsibility of the UIProcess, which does the relevant work.
Attachments
Patch (2.69 KB, patch)
2018-05-22 14:56 PDT, Brent Fulgham 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2018-05-22 14:54:17 PDT
<rdar://problem/39686511>
Brent Fulgham
Comment 2 2018-05-22 14:56:34 PDT
Created attachment 341034 [details] Patch
Brent Fulgham
Comment 3 2018-05-22 15:49:13 PDT
Also tested manually on iOS.
Alexey Proskuryakov
Comment 4 2018-05-22 18:50:36 PDT
Comment on attachment 341034 [details] Patch rs=me
Brent Fulgham
Comment 5 2018-05-22 18:56:35 PDT
Comment on attachment 341034 [details] Patch Thank you for reviewing!
WebKit Commit Bot
Comment 6 2018-05-22 19:24:03 PDT
Comment on attachment 341034 [details] Patch Clearing flags on attachment: 341034 Committed r232097: <https://trac.webkit.org/changeset/232097>
WebKit Commit Bot
Comment 7 2018-05-22 19:24:04 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.