RESOLVED FIXED276338
[Cocoa] Recognize a second entitlement to allow non-Lockdown Mode processes to launch 
https://bugs.webkit.org/show_bug.cgi?id=276338
Summary [Cocoa] Recognize a second entitlement to allow non-Lockdown Mode processes t...
Brent Fulgham
Reported 2024-07-08 13:53:59 PDT
Applications using `WKWebView` that have the `com.apple.developer.web-browser` entitlement can request that a particular page be loaded outside of Lockdown Mode. This allows users to bypass LDM on sites that don't work well under that restricted set of features. We would like to permit some system processes to launch a plain WKWebView in lockdown mode because of similar compatibility issues. We do not want to use the `web-browser` entitlement, since we do not want the other powerful features that entitlement grants. We are adding a managed entitlement to support this restricted use case: `com.apple.private.allow-ldm-exempt-webview` This patch recognizes this new entitlement as an alternative to `com.apple.developer.web-browser` for this specific case. <rdar://127464996>
Attachments
Add attachment proposed patch, testcase, etc.
Brent Fulgham
Comment 1 2024-07-08 14:09:06 PDT
Pull request: https://github.com/WebKit/WebKit/pull/30579
EWS
Comment 2 2024-07-08 21:00:23 PDT
Committed 280761@main (ee77044edb54): <https://commits.webkit.org/280761@main> Reviewed commits have been landed. Closing PR #30579 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.