[webkit-changes] [WebKit/WebKit] 1db982: Fix infinite loops when parsing invalid CSP header...

[Alex Christensen]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 1db982b7c00fb561e1028e9d460a3425848c30e8
      https://github.com/WebKit/WebKit/commit/1db982b7c00fb561e1028e9d460a3425848c30e8
  Author: Alex Christensen <achristensen at apple.com>
  Date:   2024-09-26 (Thu, 26 Sep 2024)

  Changed paths:
    M Source/WebCore/page/csp/ContentSecurityPolicyDirectiveList.cpp
    M Source/WebCore/page/csp/ContentSecurityPolicyTrustedTypesDirective.cpp
    M Tools/TestWebKitAPI/Tests/WebKitCocoa/ContentSecurityPolicy.mm

  Log Message:
  -----------
  Fix infinite loops when parsing invalid CSP header fields after 273894 at main
https://bugs.webkit.org/show_bug.cgi?id=280442
rdar://136779806

Reviewed by Brent Fulgham.

If we find an invalid value, report it and return instead of reporting it over and over
again in an infinite loop until we run out of memory from too many reports.

* Source/WebCore/page/csp/ContentSecurityPolicyDirectiveList.cpp:
(WebCore::ContentSecurityPolicyDirectiveList::parseRequireTrustedTypesFor):
* Source/WebCore/page/csp/ContentSecurityPolicyTrustedTypesDirective.cpp:
(WebCore::ContentSecurityPolicyTrustedTypesDirective::parse):
* Tools/TestWebKitAPI/Tests/WebKitCocoa/ContentSecurityPolicy.mm:
(TEST(ContentSecurityPolicy, InvalidRequireTrustedTypesFor)):

Canonical link: https://commits.webkit.org/284334@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications