[Webkit-unassigned] [Bug 167058] REGRESSION(r210531): Broke local resource loads from custom local protocols

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Jan 14 15:21:37 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=167058

Michael Catanzaro <mcatanzaro at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |achristensen at apple.com,
                   |                            |dbates at webkit.org

--- Comment #1 from Michael Catanzaro <mcatanzaro at igalia.com> ---
This is going to be a blocker for the GTK+ port. I'm not sure the right thing to do here. Is it acceptable to enforce this check only for file URIs and not all local protocols? I'll submit a patch that does that. The downside of this approach is that it's not hard to image a custom local URI scheme that allows loading untrusted data.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170114/6081c8cd/attachment.html>


More information about the webkit-unassigned mailing list