Bug 60791

Summary: Use AVAssetReferenceRestrictions to prevent cross site media references
Product: WebKit Reporter: Eric Carlson <eric.carlson>
Component: MediaAssignee: Eric Carlson <eric.carlson>
Severity: Normal CC: ademar, simon.fraser
Priority: P2 Keywords: InRadar, PlatformOnly
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: Unspecified   
Description Flags
Proposed patch. none

Description Eric Carlson 2011-05-13 13:03:12 PDT
The AVFoundation media engine should be configured to disallow cross site media references.

Comment 1 Eric Carlson 2011-05-13 13:28:50 PDT
Created attachment 93499 [details]
Proposed patch.
Comment 2 Eric Carlson 2011-05-15 09:19:32 PDT
Comment on attachment 93499 [details]
Proposed patch.

This was reviewed by Maciej.
Comment 3 Eric Carlson 2011-05-15 09:19:50 PDT
Comment 4 Simon Fraser (smfr) 2011-05-15 10:30:40 PDT
The new test is failing on Leopard and SnowLeopard.
Comment 5 Eric Carlson 2011-05-15 10:37:23 PDT
(In reply to comment #4)
> The new test is failing on Leopard and SnowLeopard.

Looks OK on Leopard so far.

Added to SL skipped list in http://trac.webkit.org/changeset/86508.
Comment 6 Ademar Reis 2011-06-03 14:04:57 PDT
Revision r86506 cherry-picked into qtwebkit-2.2 with commit a4f1520 <http://gitorious.org/webkit/qtwebkit/commit/a4f1520>