Bug 226044

Summary: [Cocoa] Adopt "com.apple.QuartzCore.webkit-limited-types" entitlement
Product: WebKit Reporter: Brent Fulgham <bfulgham>
Component: WebKit Misc.Assignee: Brent Fulgham <bfulgham>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, pvollan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description Brent Fulgham 2021-05-20 14:39:27 PDT 
WebKit should adopt the "com.apple.QuartzCore.webkit-limited-types" entitlement as a further hardening measure to help QuartzCore limit the features accessible from the WebContent and GPU Process. WebKit only needs a small portion of the features of QuartzCore, and this entitlement allows the framework to block certain code paths.
Comment 1 Brent Fulgham 2021-05-20 14:40:45 PDT 
<rdar://problem/60549120>
Comment 2 Brent Fulgham 2021-05-20 14:42:05 PDT 
Created attachment 429224 [details]
Patch
Comment 3 Per Arne Vollan 2021-05-20 15:04:39 PDT 
Comment on attachment 429224 [details]
Patch

R=me.
Comment 4 EWS 2021-05-20 16:03:20 PDT 
Committed r277834 (237978@main): <https://commits.webkit.org/237978@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 429224 [details].