Bug 60791

Summary: Use AVAssetReferenceRestrictions to prevent cross site media references
Product: WebKit Reporter: Eric Carlson <eric.carlson>
Component: MediaAssignee: Eric Carlson <eric.carlson>
Status: RESOLVED FIXED    
Severity: Normal CC: ademar, simon.fraser
Priority: P2 Keywords: InRadar, PlatformOnly
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: Unspecified   
Attachments:
Description Flags
Proposed patch. none

Eric Carlson
Reported 2011-05-13 13:03:12 PDT
The AVFoundation media engine should be configured to disallow cross site media references. <rdar://problem/9374202>
Attachments
Proposed patch. (7.31 KB, patch)
2011-05-13 13:28 PDT, Eric Carlson 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Eric Carlson
Comment 1 2011-05-13 13:28:50 PDT
Created attachment 93499 [details] Proposed patch.
Eric Carlson
Comment 2 2011-05-15 09:19:32 PDT
Comment on attachment 93499 [details] Proposed patch. This was reviewed by Maciej.
Eric Carlson
Comment 3 2011-05-15 09:19:50 PDT
http://trac.webkit.org/changeset/86506
Simon Fraser (smfr)
Comment 4 2011-05-15 10:30:40 PDT
The new test is failing on Leopard and SnowLeopard.
Eric Carlson
Comment 5 2011-05-15 10:37:23 PDT
(In reply to comment #4) > The new test is failing on Leopard and SnowLeopard. Looks OK on Leopard so far. Added to SL skipped list in http://trac.webkit.org/changeset/86508.
Ademar Reis
Comment 6 2011-06-03 14:04:57 PDT
Revision r86506 cherry-picked into qtwebkit-2.2 with commit a4f1520 <http://gitorious.org/webkit/qtwebkit/commit/a4f1520>
Note You need to log in before you can comment on or make changes to this bug.