Bug 185890 - Close access to "lsopen" for non-UI process
Summary: Close access to "lsopen" for non-UI process
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit2 (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Brent Fulgham
Keywords: InRadar
Depends on:
Reported: 2018-05-22 14:54 PDT by Brent Fulgham
Modified: 2018-05-22 19:24 PDT (History)
4 users (show)

See Also:

Patch (2.69 KB, patch)
2018-05-22 14:56 PDT, Brent Fulgham
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Brent Fulgham 2018-05-22 14:54:05 PDT
The WebContent, Network, and Storage processes should not have access to the LaunchServices 'openURL' feature, since opening URL's is the responsibility of the UIProcess, which does the relevant work.
Comment 1 Brent Fulgham 2018-05-22 14:54:17 PDT
Comment 2 Brent Fulgham 2018-05-22 14:56:34 PDT
Created attachment 341034 [details]
Comment 3 Brent Fulgham 2018-05-22 15:49:13 PDT
Also tested manually on iOS.
Comment 4 Alexey Proskuryakov 2018-05-22 18:50:36 PDT
Comment on attachment 341034 [details]

Comment 5 Brent Fulgham 2018-05-22 18:56:35 PDT
Comment on attachment 341034 [details]

Thank you for reviewing!
Comment 6 WebKit Commit Bot 2018-05-22 19:24:03 PDT
Comment on attachment 341034 [details]

Clearing flags on attachment: 341034

Committed r232097: <https://trac.webkit.org/changeset/232097>
Comment 7 WebKit Commit Bot 2018-05-22 19:24:04 PDT
All reviewed patches have been landed.  Closing bug.