[webkit-changes] [WebKit/WebKit] c13924: Enable QuickLook sandbox restrictions after naviga...

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c13924352606e452a28e14bfeda40f51c63d1da7
      https://github.com/WebKit/WebKit/commit/c13924352606e452a28e14bfeda40f51c63d1da7
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2024-03-30 (Sat, 30 Mar 2024)

  Changed paths:
    M Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in
    M Source/WebKit/Scripts/process-entitlements.sh
    M Source/WebKit/UIProcess/WebPageProxy.cpp
    M Source/WebKit/WebProcess/Network/WebResourceLoader.cpp

  Log Message:
  -----------
  Enable QuickLook sandbox restrictions after navigation policy decision
https://bugs.webkit.org/show_bug.cgi?id=271939
rdar://125663992

Reviewed by Chris Dumez.

Enable QuickLook sandbox restrictions after navigation policy decision. This enablement
was previously done in WebResourceLoader::didReceiveResponse, but that is incorrect,
since it would block QuickLook specific sandbox resources when one or more iframes
contained documents that could be previewed with QuickLook.

* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
* Source/WebKit/Scripts/process-entitlements.sh:
* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::receivedNavigationActionPolicyDecision):
(WebKit::WebPageProxy::decidePolicyForResponseShared):
* Source/WebKit/WebProcess/Network/WebResourceLoader.cpp:
(WebKit::WebResourceLoader::didReceiveResponse):

Canonical link: https://commits.webkit.org/276862@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications