Bug 289512

Summary: Make WebDeviceOrientationUpdateProviderProxy validate origin access before registering for change
Product: WebKit Reporter: Sihui Liu <sihui_liu>
Component: New BugsAssignee: Sihui Liu <sihui_liu>
Status: REOPENED    
Severity: Normal CC: cdumez, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Sihui Liu
Reported 2025-03-10 21:22:27 PDT
rdar://125495104
Attachments
Add attachment proposed patch, testcase, etc.
Sihui Liu
Comment 1 2025-03-10 21:33:44 PDT
Pull request: https://github.com/WebKit/WebKit/pull/42237
EWS
Comment 2 2025-03-12 18:25:01 PDT
Committed 292054@main (db03fd0f9e82): <https://commits.webkit.org/292054@main> Reviewed commits have been landed. Closing PR #42237 and removing active labels.
Chris Dumez
Comment 3 2025-10-31 06:40:19 PDT
Reopening since this got reverted for breaking device motion in third-party iframes via https://commits.webkit.org/302386@main.
Radar WebKit Bug Importer
Comment 4 2025-10-31 10:15:36 PDT
<rdar://problem/163802853>
Note You need to log in before you can comment on or make changes to this bug.