Bug 60791 - Use AVAssetReferenceRestrictions to prevent cross site media references
Summary: Use AVAssetReferenceRestrictions to prevent cross site media references
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Media Elements (show other bugs)
Version: 528+ (Nightly build)
Hardware: Macintosh Unspecified
: P2 Normal
Assignee: Eric Carlson
URL:
Keywords: InRadar, PlatformOnly
Depends on:
Blocks:
 
Reported: 2011-05-13 13:03 PDT by Eric Carlson
Modified: 2011-06-03 14:04 PDT (History)
2 users (show)

See Also:


Attachments
Proposed patch. (7.31 KB, patch)
2011-05-13 13:28 PDT, Eric Carlson
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Eric Carlson 2011-05-13 13:03:12 PDT
The AVFoundation media engine should be configured to disallow cross site media references.

<rdar://problem/9374202>
Comment 1 Eric Carlson 2011-05-13 13:28:50 PDT
Created attachment 93499 [details]
Proposed patch.
Comment 2 Eric Carlson 2011-05-15 09:19:32 PDT
Comment on attachment 93499 [details]
Proposed patch.

This was reviewed by Maciej.
Comment 3 Eric Carlson 2011-05-15 09:19:50 PDT
http://trac.webkit.org/changeset/86506
Comment 4 Simon Fraser (smfr) 2011-05-15 10:30:40 PDT
The new test is failing on Leopard and SnowLeopard.
Comment 5 Eric Carlson 2011-05-15 10:37:23 PDT
(In reply to comment #4)
> The new test is failing on Leopard and SnowLeopard.

Looks OK on Leopard so far.

Added to SL skipped list in http://trac.webkit.org/changeset/86508.
Comment 6 Ademar Reis 2011-06-03 14:04:57 PDT
Revision r86506 cherry-picked into qtwebkit-2.2 with commit a4f1520 <http://gitorious.org/webkit/qtwebkit/commit/a4f1520>