Bug 46999 – [Qt] The default path of HTML5 QWebSettings::enablePeristentStorage violates Symbian Platform Security

• Status: RESOLVED
• Resolution: WONTFIX
• Component: WebKit Qt

[George Guo]

Usually application does not have ALLFILE capability in Symbian

If the application has no ALLFILE capability, tried to enable persistentStorage in Symbian with this function call:
            QWebSettings::enablePersistentStorage();

Application will get this following error: 

04:52:12.697 PlatSec ERROR - Capability check failed - A Message (function number=0x00000016) from Thread NokiaBrowser[10008d39]0001::NokiaBrowser, sent to Server !FileServer, was checked by Thread efile.exe[100039e3]0001::Main and was found to be missing the capabilities: AllFiles . Additional diagnostic message: Entry

[George Guo]

solution patch is on the way

[George Guo]

Created attachment 69630 [details]
Patch for the solution. 

The default path on Symbian is c:\private\uid, the makedir then will change c:\private which is out the control of the application process. On symbian a process can only change your own process/uid area with out ALLFILE capability. By adding additional path so it becomes c:\private\uid\StoragePath, then makedir will only change c:\private\uid which is completely in control of the application because it's in it's uid area.

[Andreas Kling]

Comment on attachment 69630 [details]
Patch for the solution. 

Please tick the "patch" checkbox when uploading patches. :-)

[Simon Hausmann]

This is actually a bug in QDir::mkpath, which can now be tracked at

http://bugreports.qt.nokia.com/browse/QTBUG-14255

[Simon Hausmann]

Comment on attachment 69630 [details]
Patch for the solution. 

This should really be fixed in Qt. I don't think appending "StoragePath" on all platforms for this rather minor Symbian specific glitch is the best way to fix this.