We need to ensure that all image decoding happens in the well-sandboxed WebContent process, and not in the GPU process. Decoding bitmap images and images in fonts will be controlled by the ImageIO SPI: CGImageSourceSetAllowableTypes(). We will release assert if a PDF image is created in the GPU Process.
Created attachment 420269 [details] Patch
<rdar://problem/69800747>
Created attachment 420271 [details] Patch
<rdar://problem/74341122>
Created attachment 420284 [details] Patch
Committed r272888: <https://commits.webkit.org/r272888> All reviewed patches have been landed. Closing bug and clearing flags on attachment 420284 [details].