[Webkit-unassigned] [Bug 78227] [WK2] WebProcess terminates when loading HTML string with resources in paths different from the base url
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Feb 9 10:09:00 PST 2012
https://bugs.webkit.org/show_bug.cgi?id=78227
Alexey Proskuryakov <ap at webkit.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |ap at webkit.org
--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> 2012-02-09 10:09:00 PST ---
This is expected behavior. The reason is that showing generated pages that reference browser resources - such as error pages - should not enable access to arbitrary files (if they did, an exploited WebProcess would always be able to break out of its sandbox).
Can the documentation viewer just pass "file:///" as base URL?
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list