[webkit-changes] [WebKit/WebKit] e1fa6b: Block access to trustd on macOS

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: e1fa6b5e2b722a68c05e18e4e7e7198891223f2e
      https://github.com/WebKit/WebKit/commit/e1fa6b5e2b722a68c05e18e4e7e7198891223f2e
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2023-11-14 (Tue, 14 Nov 2023)

  Changed paths:
    M Source/WebCore/PAL/pal/spi/cf/VideoToolboxSPI.h
    M Source/WebKit/UIProcess/Cocoa/WebProcessPoolCocoa.mm
    M Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  Block access to trustd on macOS
https://bugs.webkit.org/show_bug.cgi?id=264685
rdar://114834439

Reviewed by Sihui Liu.

This can be achieved by using a new flag to skip code sign validation for trusted plugins.
This change also enables us to remove eager opening of the trustd connection.

* Source/WebCore/PAL/pal/spi/cf/VideoToolboxSPI.h:
* Source/WebKit/UIProcess/Cocoa/WebProcessPoolCocoa.mm:
(WebKit::WebProcessPool::platformInitializeWebProcess):
* Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm:
(WebKit::setVideoDecoderBehaviors):
(WebKit::WebProcess::platformInitializeWebProcess):
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:

Canonical link: https://commits.webkit.org/270720@main