Bug 60791

Summary:

Use AVAssetReferenceRestrictions to prevent cross site media references

Product:

WebKit

Reporter:

Eric Carlson <eric.carlson>

Component:

Media

Assignee:

Eric Carlson <eric.carlson>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ademar, simon.fraser

Priority:

Keywords:

InRadar, PlatformOnly

Version:

528+ (Nightly build)

Hardware:

Mac

OS:

Unspecified

Attachments:

Description	Flags
Proposed patch.	none

Description Eric Carlson 2011-05-13 13:03:12 PDT

The AVFoundation media engine should be configured to disallow cross site media references.

<rdar://problem/9374202>

Comment 1 Eric Carlson 2011-05-13 13:28:50 PDT

Created attachment 93499 [details]
Proposed patch.

Comment 2 Eric Carlson 2011-05-15 09:19:32 PDT

Comment on attachment 93499 [details]
Proposed patch.

This was reviewed by Maciej.

Comment 3 Eric Carlson 2011-05-15 09:19:50 PDT

http://trac.webkit.org/changeset/86506

Comment 4 Simon Fraser (smfr) 2011-05-15 10:30:40 PDT

The new test is failing on Leopard and SnowLeopard.

Comment 5 Eric Carlson 2011-05-15 10:37:23 PDT

(In reply to comment #4)
> The new test is failing on Leopard and SnowLeopard.

Looks OK on Leopard so far.

Added to SL skipped list in http://trac.webkit.org/changeset/86508.

Comment 6 Ademar Reis 2011-06-03 14:04:57 PDT

Revision r86506 cherry-picked into qtwebkit-2.2 with commit a4f1520 <http://gitorious.org/webkit/qtwebkit/commit/a4f1520>