[Webkit-unassigned] [Bug 162906] [SOUP] Remove SSLPolicyFlags from SoupNetworkSession

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Nov 5 03:10:12 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=162906

Ihor Ivlev <ivlev.igor at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ivlev.igor at gmail.com

--- Comment #4 from Ihor Ivlev <ivlev.igor at gmail.com> ---
Hi Carlos,

this patch is setting SOUP_SESSION_SSL_STRICT to FALSE in constructor and removing setSSLPolicy, so is it possible for a user to set it back to TRUE later?
If not, does it look like a security issue?

Thanks!

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161105/e41665a9/attachment.html>


More information about the webkit-unassigned mailing list