Bug 219852 - [macOS] Add sandbox parameter for message filter entitlement status
Summary: [macOS] Add sandbox parameter for message filter entitlement status
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Per Arne Vollan
URL:
Keywords: InRadar
Depends on: 219935
Blocks:
  Show dependency treegraph
 
Reported: 2020-12-14 06:40 PST by Per Arne Vollan
Modified: 2020-12-16 05:36 PST (History)
3 users (show)

See Also:


Attachments
Patch (29.40 KB, patch)
2020-12-14 06:55 PST, Per Arne Vollan
ews-feeder: commit-queue-
Details | Formatted Diff | Diff
Patch (29.44 KB, patch)
2020-12-14 07:57 PST, Per Arne Vollan
bfulgham: review+
Details | Formatted Diff | Diff
Patch (14.37 KB, patch)
2020-12-15 04:25 PST, Per Arne Vollan
no flags Details | Formatted Diff | Diff
Patch (14.52 KB, patch)
2020-12-16 02:31 PST, Per Arne Vollan
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Per Arne Vollan 2020-12-14 06:40:01 PST
Add sandbox parameter to determine whether the WebContent process has message filter entitlement. This parameter will be used in the sandbox to enable message filtering.
Comment 1 Per Arne Vollan 2020-12-14 06:49:49 PST
<rdar://problem/72145560>
Comment 2 Per Arne Vollan 2020-12-14 06:55:19 PST
Created attachment 416153 [details]
Patch
Comment 3 Per Arne Vollan 2020-12-14 07:57:06 PST
Created attachment 416159 [details]
Patch
Comment 4 Brent Fulgham 2020-12-14 09:50:10 PST
Comment on attachment 416159 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=416159&action=review

> Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:119
> +    (if (equal? (param "ENABLE_SANDBOX_MESSAGE_FILTER") "YES")

Is it not possible to have the conditional just apply to the message filter bit of the code? That might make this easier to understand.
Comment 5 Per Arne Vollan 2020-12-14 10:35:21 PST
(In reply to Brent Fulgham from comment #4)
> Comment on attachment 416159 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=416159&action=review
> 
> > Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:119
> > +    (if (equal? (param "ENABLE_SANDBOX_MESSAGE_FILTER") "YES")
> 
> Is it not possible to have the conditional just apply to the message filter
> bit of the code? That might make this easier to understand.

That would be better, but it does not seem to be possible, since the if clause cannot appear inside another clause, it appears.

Thanks for reviewing!
Comment 6 Brent Fulgham 2020-12-14 16:30:17 PST
Comment on attachment 416159 [details]
Patch

Lots of indenting! r=me
Comment 7 Per Arne Vollan 2020-12-15 04:25:19 PST
Created attachment 416235 [details]
Patch
Comment 8 Per Arne Vollan 2020-12-15 04:25:58 PST
(In reply to Brent Fulgham from comment #6)
> Comment on attachment 416159 [details]
> Patch
> 
> Lots of indenting! r=me

Fixed in latest patch.

Thanks for reviewing!
Comment 9 EWS 2020-12-15 04:54:00 PST
Committed r270829: <https://trac.webkit.org/changeset/270829>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 416235 [details].
Comment 10 WebKit Commit Bot 2020-12-15 22:56:22 PST
Re-opened since this is blocked by bug 219935
Comment 11 Per Arne Vollan 2020-12-16 02:31:38 PST
Created attachment 416321 [details]
Patch
Comment 12 EWS 2020-12-16 05:36:05 PST
Committed r270887: <https://trac.webkit.org/changeset/270887>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 416321 [details].