[Webkit-unassigned] [Bug 156651] [GTK] Expose AllowUniversalAccessFromFileURLs preference now that calling localStorage.getItem() results in SecurityError: DOM Exception 18

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 18 07:56:06 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=156651

--- Comment #28 from Michael Catanzaro <mcatanzaro at igalia.com> ---
(In reply to comment #26) 
> 1.- Patch WebKit in 2.12 branch only to allow access to local storage from
> file URLs when AllowFileAccessFromFileURLS is set.

No please, let's not change the semantics of this setting just for a stable branch.

> 2.- Roll out the patch that introduced the issue. It doesn't look like a so
> serious issue in the end, and it has always been that way.

I dunno about that either; arbitrary access to localStorage seems pretty serious.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160418/a4d98d2f/attachment.html>


More information about the webkit-unassigned mailing list