Bug 185890 - Close access to "lsopen" for non-UI process
Summary: Close access to "lsopen" for non-UI process
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit2 (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Brent Fulgham
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2018-05-22 14:54 PDT by Brent Fulgham
Modified: 2018-05-22 19:24 PDT (History)
4 users (show)

See Also:

Attachments
Patch (2.69 KB, patch)
2018-05-22 14:56 PDT, Brent Fulgham 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Brent Fulgham 2018-05-22 14:54:05 PDT 
The WebContent, Network, and Storage processes should not have access to the LaunchServices 'openURL' feature, since opening URL's is the responsibility of the UIProcess, which does the relevant work.
Comment 1 Brent Fulgham 2018-05-22 14:54:17 PDT 
<rdar://problem/39686511>
Comment 2 Brent Fulgham 2018-05-22 14:56:34 PDT 
Created attachment 341034 [details]
Patch
Comment 3 Brent Fulgham 2018-05-22 15:49:13 PDT 
Also tested manually on iOS.
Comment 4 Alexey Proskuryakov 2018-05-22 18:50:36 PDT 
Comment on attachment 341034 [details]
Patch

rs=me
Comment 5 Brent Fulgham 2018-05-22 18:56:35 PDT 
Comment on attachment 341034 [details]
Patch

Thank you for reviewing!
Comment 6 WebKit Commit Bot 2018-05-22 19:24:03 PDT 
Comment on attachment 341034 [details]
Patch

Clearing flags on attachment: 341034

Committed r232097: <https://trac.webkit.org/changeset/232097>
Comment 7 WebKit Commit Bot 2018-05-22 19:24:04 PDT 
All reviewed patches have been landed.  Closing bug.