[webkit-changes] [WebKit/WebKit] 16db5d: Block notify service in sandbox

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 16db5d84a8b68fa9bd90a8c89c22e39a424cd882
      https://github.com/WebKit/WebKit/commit/16db5d84a8b68fa9bd90a8c89c22e39a424cd882
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2024-02-17 (Sat, 17 Feb 2024)

  Changed paths:
    M Source/WebCore/PAL/pal/spi/cocoa/NotifySPI.h
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in
    M Source/WebKit/Shared/AuxiliaryProcess.h
    M Source/WebKit/Shared/Cocoa/AuxiliaryProcessCocoa.mm
    M Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm
    M Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  Block notify service in sandbox
rdar://114834311
https://bugs.webkit.org/show_bug.cgi?id=269205

Reviewed by Brent Fulgham.

Adopt new notify option, which will prevent accessing the notify service by enabling
in-process notifications. The UI process is observing a set of notifications, and will
push those to the WebContent process.

* Source/WebKit/Shared/AuxiliaryProcess.h:
* Source/WebKit/Shared/Cocoa/AuxiliaryProcessCocoa.mm:
(WebKit::AuxiliaryProcess::setNotifyOptions):
* Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm:
(WebKit::setNotifyOptions): Deleted.
* Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm:
(WebKit::WebProcess::platformInitializeProcess):

Canonical link: https://commits.webkit.org/274927@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications