[Webkit-unassigned] [Bug 78227] [WK2] WebProcess terminates when loading HTML string with resources in paths different from the base url

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Feb 9 10:09:00 PST 2012


https://bugs.webkit.org/show_bug.cgi?id=78227


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ap at webkit.org




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2012-02-09 10:09:00 PST ---
This is expected behavior. The reason is that showing generated pages that reference browser resources - such as error pages - should not enable access to arbitrary files (if they did, an exploited WebProcess would always be able to break out of its sandbox).

Can the documentation viewer just pass "file:///" as base URL?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list