Now that we generate a dynamic extension for 'com.apple.nehelper' and 'com.apple.nesessionmanager.content-filter', we should remove the blanket allow rules from the sandbox.
<rdar://problem/58453508>
Created attachment 387290 [details] Patch
Created attachment 387293 [details] Patch
Comment on attachment 387293 [details] Patch Great! R=me.
Committed r254351: <https://trac.webkit.org/changeset/254351>