[Webkit-unassigned] [Bug 38711] New: [chromium] DragDataChromium::asURL() shouldn't do file validity checks

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=38711

           Summary: [chromium] DragDataChromium::asURL() shouldn't do file
                    validity checks
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows 7
            Status: UNCONFIRMED
          Severity: Minor
          Priority: P2
         Component: Platform
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: dcheng at chromium.org
                CC: tony at chromium.org, jianli at chromium.org


The renderer is sandboxed, and the calls to get file metadata will (should)
fail. The loader is smart enough to do the right thing. The general consensus
seemed to be that letting the renderer poke at the filesystem like this is
undesirable.

This is only a problem on Windows today because the Linux/Mac sandboxes allow
metadata access today in order to follow symlinks. However, it's probably good
to avoid depending on this function if at all possible.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.