Bug 189967 – [WPE][GTK] Remove network access from WebProcess in sandbox

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKitGTK

[Patrick Griffis]

Currently the WebProcess requires network access because GStreamer requires it for HLS (HTTP Live Streaming)
possibly among other features.

This is a hole that shouldn't exist since that is the purpose of a separate NetworkProcess. We need
to figure out some way to proxy data through that to GStreamer.

[Philippe Normand]

Our internal httpsrc element was used in the past for HLS/etc fragments downloading, when the URI scheme it exposes was http(s), without the webkit+ prefix.

This had bad side effects for multimedia applications depending on WebKit...

Ideally I think the gst adaptivedemux and its uridownloader element should try to reuse the src element initially used for the manifest download.

[Philippe Normand]

(In reply to Philippe Normand from comment #1)
> Ideally I think the gst adaptivedemux and its uridownloader element should
> try to reuse the src element initially used for the manifest download.

I hit "save changes" too early. :)
What I meant was the uridownloader should instantiate the same element type that was used for the manifest download, if possible.

[Philippe Normand]

Created attachment 363638 [details]
WiP patch

With this webkitwebsrc is used to download HLS/etc fragments and it works if the webprocess has no network access as well. The patch breaks 2 HLS cookie checking layout tests though, so needs some more investigation.

[Philippe Normand]

*** Bug 181377 has been marked as a duplicate of this bug. ***

[Michael Catanzaro]

(In reply to Patrick Griffis from comment #0)
> Currently the WebProcess requires network access because GStreamer requires
> it for HLS (HTTP Live Streaming)
> possibly among other features.
> 
> This is a hole that shouldn't exist since that is the purpose of a separate
> NetworkProcess. We need
> to figure out some way to proxy data through that to GStreamer.

Should be possible to try this now that Phil has handled HLS.

[Philippe Normand]

HLS is not handled yet, the WiP patch attached here needs to be finished.

[Philippe Normand]

*** Bug 169964 has been marked as a duplicate of this bug. ***

[Philippe Normand]

Comment on attachment 363638 [details]
WiP patch

See bug #195948 ... I'll leave this one open for the BubbleWrap changes, not specific to GStreamer.

[Philippe Normand]

(In reply to Michael Catanzaro from comment #5)
> (In reply to Patrick Griffis from comment #0)
> > Currently the WebProcess requires network access because GStreamer requires
> > it for HLS (HTTP Live Streaming)
> > possibly among other features.
> > 
> > This is a hole that shouldn't exist since that is the purpose of a separate
> > NetworkProcess. We need
> > to figure out some way to proxy data through that to GStreamer.
> 
> Should be possible to try this now that Phil has handled HLS.

Now it is handled, there's no remaining blocker for this issue. Feel free to close the network hole from the WebProcess \o/

[Patrick Griffis]

Created attachment 365882 [details]
Patch

[WebKit Commit Bot]

Comment on attachment 365882 [details]
Patch

Clearing flags on attachment: 365882

Committed r243449: <https://trac.webkit.org/changeset/243449>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.