[Webkit-unassigned] [Bug 78227] New: [WK2] WebProcess terminates when loading HTML string with resources in paths different from the base url

Thu Feb 9 06:14:29 PST 2012

https://bugs.webkit.org/show_bug.cgi?id=78227

           Summary: [WK2] WebProcess terminates when loading HTML string
                    with resources in paths different from the base url
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: cgarcia at igalia.com
                CC: darin at apple.com, andersca at apple.com, sam at webkit.org

This only happens if a base URL is passed to loadHTMLString. If the same HTML string is saved to a file and loaded with loadURI, it works perfectly, because willAcquireUniversalFileReadSandboxExtension() is called in that case. 

This problem affects Devhelp the GNOME dev documentation viewer, it has a mode that loads parts of html files, extracted and loaded with loadHTML(). That HTML code contains links relative to the current path, so it passes the html file as base url. The problem is that it also has its own css and javascript in a different directory, see this example:

Snippet extracted from file:///usr/share/gtk-doc/html/glib/glib-Hash-Tables.html
<html><head><link rel="stylesheet" type="text/css" href="file:///usr/share/devhelp/assistant/assistant.css"/><script src="file:///usr/share/devhelp/assistant/assistant.js"></script></head><body onload="reformatSignature()"><div class="title">Function: <a href="file:///home/cgarcia/gnome/share/gtk-doc/html/glib/glib-Hash-Tables.html#g-str-hash">g_str_hash</a>
....

In WebPageProxy::didInitiateLoadForResource() the url resource is checked and checkURLReceivedFromWebProcess() returns false, because it's not in the base url dir, which makes the web process to terminate:

"Receive an invalid message from the web process with message ID 230049"

This has always worked with WebKit1. Is this new behaviour expected or just a bug?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.