[webkit-changes] [WebKit/WebKit] 63e114: Check sandbox access in the WebContent process bef...

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 63e1147ab47b44a6127454044a4cb0a87ab23d30
      https://github.com/WebKit/WebKit/commit/63e1147ab47b44a6127454044a4cb0a87ab23d30
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2024-08-28 (Wed, 28 Aug 2024)

  Changed paths:
    M Source/WTF/wtf/spi/darwin/SandboxSPI.h
    M Source/WebKit/UIProcess/WebPageProxy.cpp

  Log Message:
  -----------
  Check sandbox access in the WebContent process before opening local file
https://bugs.webkit.org/show_bug.cgi?id=278745
rdar://134101098

Reviewed by Chris Dumez and Darin Adler.

Check sandbox access in the WebContent process before deciding whether a sandbox extension should be created when opening local files.
This call is made from the UI process and will return the sandbox read access status for the given file at this point in time.

* Source/WTF/wtf/spi/darwin/SandboxSPI.h:
* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::maybeInitializeSandboxExtensionHandle):

Canonical link: https://commits.webkit.org/282882@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications