[webkit-changes] [WebKit/WebKit] 3c566d: [macOS] Remove sandbox extension to com.apple.CARe...

[Per Arne Vollan]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 3c566dd24b1b66c1afc09bab560cca8e821d140f
      https://github.com/WebKit/WebKit/commit/3c566dd24b1b66c1afc09bab560cca8e821d140f
  Author: Per Arne Vollan <pvollan at apple.com>
  Date:   2025-02-05 (Wed, 05 Feb 2025)

  Changed paths:
    M Source/WebKit/Scripts/process-entitlements.sh
    M Source/WebKit/WebProcess/WebPage/WebPage.cpp
    M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in

  Log Message:
  -----------
  [macOS] Remove sandbox extension to com.apple.CARenderServer in the WebContent process
https://bugs.webkit.org/show_bug.cgi?id=287024
rdar://135814082

Reviewed by Sihui Liu.

It should not be possible for the WebContent process to consume a sandbox extension to CARenderServer if in Lockdown Mode or
if both IOKit is blocked and Unified PDF is enabled.

* Source/WebKit/Scripts/process-entitlements.sh:
* Source/WebKit/WebProcess/WebPage/WebPage.cpp:
(WebKit::m_textAnimationController):
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:

Canonical link: https://commits.webkit.org/289914@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications